diff --git a/404.html b/404.html
index 2dce673a1bc..00199d82ba2 100644
--- a/404.html
+++ b/404.html
@@ -1,2 +1,2 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>404 Page not found</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/hybrid.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><style>:root #header+#content>#left>#rlblock_left{display:none!important}p,li,ul{text-align:center}ul{list-style-type:none}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/><section id=body style=margin-left:0><div id=overlay></div><div id=chapter><div id=body-inner><h1>Error</h1><p></p><p>Woops. Looks like this page doesn't exist ¯\_(ツ)_/¯.</p><p></p><p><a href=/>Go to homepage</a></p><p><img src=/images/velo_small.svg style=width:50% alt="Page not found!"></p></div></div></section></body></html>
\ No newline at end of file
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/hybrid.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><style>:root #header+#content>#left>#rlblock_left{display:none!important}p,li,ul{text-align:center}ul{list-style-type:none}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/><section id=body style=margin-left:0><div id=overlay></div><div id=chapter><div id=body-inner><h1>Error</h1><p></p><p>Woops. Looks like this page doesn't exist ¯\_(ツ)_/¯.</p><p></p><p><a href=/>Go to homepage</a></p><p><img src=/images/velo_small.svg style=width:50% alt="Page not found!"></p></div></div></section></body></html>
\ No newline at end of file
diff --git a/announcements/2021-artifact-contest/index.html b/announcements/2021-artifact-contest/index.html
index 5f98856276b..b3fc1ee9c77 100644
--- a/announcements/2021-artifact-contest/index.html
+++ b/announcements/2021-artifact-contest/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Were you planning to try Velociraptor in the past? You can now win some awesome prizes by learning and applying Velociraptor to your own network.
 "><link rel=icon href=/images/favicon.png type=image/png><title>2021 Velociraptor Contributor Competition :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/announcements/2021-artifact-contest/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/announcements/2021-artifact-contest/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -111,4 +111,4 @@
 independently rank contributions and will vote based on the following
 broad criteria.</p><ul><li>Usefulness</li><li>Creativity</li><li>Effort / Difficulty</li><li>Completeness of solution</li><li>Clarity of documentation</li></ul><p>Selected works may also be asked to present their work at future
 conferences with the Velociraptor team and featured on the
-Velociraptor blog.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+Velociraptor blog.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/announcements/2022-velocon/index.html b/announcements/2022-velocon/index.html
index ad5e4566baa..1fa0bb6189c 100644
--- a/announcements/2022-velocon/index.html
+++ b/announcements/2022-velocon/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Join us in our annual Velociraptor conference to discuss and share your experiences with Velociraptor!
 "><link rel=icon href=/images/favicon.png type=image/png><title>The 2022 Velociraptor Conference - Digging together... :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/announcements/2022-velocon/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/announcements/2022-velocon/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -233,4 +233,4 @@
 and gauge the effectiveness of our detections.</p><p>Attendees will walk away from this presentation with several examples
 of how they immediately leverage Atomic Red Team tests and catch
 execution of those tests through Velociraptor to evaluate their
-detection capability and improve the security of their enterprise.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+detection capability and improve the security of their enterprise.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/announcements/2023-cves/index.html b/announcements/2023-cves/index.html
index e1b2a5097bc..aaf533148b7 100644
--- a/announcements/2023-cves/index.html
+++ b/announcements/2023-cves/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="The current CVEs in the latest release.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Current CVEs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/announcements/2023-cves/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/announcements/2023-cves/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class="dd-item active"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -157,4 +157,4 @@
 repo</a><a class=vgi-ext href=https://github.com/Velocidex/velociraptor/>source
 repo</a><span class=vgi-text>https://github.com/Velocidex/velociraptor/blob/master/services/launcher/launcher.go</span><span class=vgi-edit>ScheduleArtifactCollection()</span><br><span class=vgi-impact>Default status is
 unaffected</span></td><td>before 0.6.7-5 (unaffected from 5)<br></td></tr></tbody></table><br style=font-size:0></div><div id=solution><h2>Solution:</h2><p>Upgrade to 0.6.7-5<br></p></div><div class="rnd pad sec vgap" id=credits><h2>Credits:</h2><p>Paul Alkemade from Telstra</p></div><div id=timeline><h2>Timeline:</h2><ul><li>2023-01-13 - Notification of the issue</li><li>2023-01-17 - Release 0.6.7-5 made available on
-Github</li></ul></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+Github</li></ul></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/announcements/2023-trainings/index.html b/announcements/2023-trainings/index.html
index 86bb0b1b611..10fd405f05c 100644
--- a/announcements/2023-trainings/index.html
+++ b/announcements/2023-trainings/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="The Velociraptor team will be at BlackHat this year!
 "><link rel=icon href=/images/favicon.png type=image/png><title>Upcoming Training Events :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/announcements/2023-trainings/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/announcements/2023-trainings/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -81,4 +81,4 @@
 that detect as many steps in the kill chain as possible. Deploy
 those artifacts in the Velociraptor environment.</li><li>The Winners are the team that automatically detects and remediates
 the most attacker actions.</li></ul><h2 id=book-now>Book now</h2><p>Reserve your spot on this course by clicking here
-<a href=https://www.blackhat.com/us-23/training/schedule/#digging-deeper-with-velociraptor-30129>https://www.blackhat.com/us-23/training/schedule/#digging-deeper-with-velociraptor-30129</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<a href=https://www.blackhat.com/us-23/training/schedule/#digging-deeper-with-velociraptor-30129>https://www.blackhat.com/us-23/training/schedule/#digging-deeper-with-velociraptor-30129</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/announcements/index.html b/announcements/index.html
index 85623a44bc4..224190daf6b 100644
--- a/announcements/index.html
+++ b/announcements/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Announcements :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/announcements/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item active haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/announcements/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item active haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>Announcements</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Announcements</h1><ul class="children children-li"><li><a href=/announcements/2023-cves/>Current CVEs</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<span class=links>Announcements</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Announcements</h1><ul class="children children-li"><li><a href=/announcements/2023-cves/>Current CVEs</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/index.html b/artifact_references/index.html
index cab4c7b5422..c0894ca432d 100644
--- a/artifact_references/index.html
+++ b/artifact_references/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Artifact Reference :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -86,4 +86,4 @@
       </div>
      </div>
    </div>
-  </div>`);n.find(".title").append(t.title),n.find(".description").append(t.description),n.find(".title").attr("href",t.link);for(let e=0;e<t.tags.length;e++){let s=t.tags[e];n.find(".idea-tag").append($(`<a class="tag">`).attr("href","/tags/"+s.toLowerCase().replace(" ","-")).append(`<i class="linkcolour tag label label-success">`+s+`</i>&nbsp;`))}let o=$(".search_results").append(n)}}</script><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+  </div>`);n.find(".title").append(t.title),n.find(".description").append(t.description),n.find(".title").attr("href",t.link);for(let e=0;e<t.tags.length;e++){let s=t.tags[e];n.find(".idea-tag").append($(`<a class="tag">`).attr("href","/tags/"+s.toLowerCase().replace(" ","-")).append(`<i class="linkcolour tag label label-success">`+s+`</i>&nbsp;`))}let o=$(".search_results").append(n)}}</script><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/admin.client.remove/index.html b/artifact_references/pages/admin.client.remove/index.html
index 9bfba39e6b0..135c71e669c 100644
--- a/artifact_references/pages/admin.client.remove/index.html
+++ b/artifact_references/pages/admin.client.remove/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Admin.Client.Remove :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/admin.client.remove/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/admin.client.remove/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -100,4 +100,4 @@
              client_id=client_id, really_do_it=ReallyDoIt)
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/admin.client.uninstall/index.html b/artifact_references/pages/admin.client.uninstall/index.html
index a9caec85a5e..daa9fbcb346 100644
--- a/artifact_references/pages/admin.client.uninstall/index.html
+++ b/artifact_references/pages/admin.client.uninstall/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Admin.Client.Uninstall :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/admin.client.uninstall/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/admin.client.uninstall/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -162,4 +162,4 @@
         SELECT * FROM execve(argv=[me[0].Exe, "service", "remove"])
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/admin.client.upgrade/index.html b/artifact_references/pages/admin.client.upgrade/index.html
index 7ffebc0fb2b..61a24af2bb9 100644
--- a/artifact_references/pages/admin.client.upgrade/index.html
+++ b/artifact_references/pages/admin.client.upgrade/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Admin.Client.Upgrade :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/admin.client.upgrade/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/admin.client.upgrade/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -120,4 +120,4 @@
               length=10000000)
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/admin.events.postprocessuploads/index.html b/artifact_references/pages/admin.events.postprocessuploads/index.html
index 4d2cb8116db..5a03edf67d1 100644
--- a/artifact_references/pages/admin.events.postprocessuploads/index.html
+++ b/artifact_references/pages/admin.events.postprocessuploads/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Admin.Events.PostProcessUploads :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/admin.events.postprocessuploads/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/admin.events.postprocessuploads/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -122,4 +122,4 @@
              FROM execve(argv=Argv)
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/admin.system.compressuploads/index.html b/artifact_references/pages/admin.system.compressuploads/index.html
index 8c783d3a478..0f309b1e2b9 100644
--- a/artifact_references/pages/admin.system.compressuploads/index.html
+++ b/artifact_references/pages/admin.system.compressuploads/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Admin.System.CompressUploads :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/admin.system.compressuploads/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/admin.system.compressuploads/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -117,4 +117,4 @@
              compress(path=Files) as CompressedFiles
       FROM files
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/custom.linux.sudousers/index.html b/artifact_references/pages/custom.linux.sudousers/index.html
index c8e374c4fcf..aa164d9738a 100644
--- a/artifact_references/pages/custom.linux.sudousers/index.html
+++ b/artifact_references/pages/custom.linux.sudousers/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Custom.Linux.SudoUsers :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/custom.linux.sudousers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/custom.linux.sudousers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -104,4 +104,4 @@
         }
       )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/demo.plugins.fifo/index.html b/artifact_references/pages/demo.plugins.fifo/index.html
index 0c6362e1b00..80d4ac2a8ed 100644
--- a/artifact_references/pages/demo.plugins.fifo/index.html
+++ b/artifact_references/pages/demo.plugins.fifo/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Demo.Plugins.Fifo :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/demo.plugins.fifo/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/demo.plugins.fifo/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -182,4 +182,4 @@
            FROM last_5_events GROUP BY SuccessTime
           }) WHERE Count &gt; 3
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/demo.plugins.gui/index.html b/artifact_references/pages/demo.plugins.gui/index.html
index ab59bfb7382..0f49f85baa0 100644
--- a/artifact_references/pages/demo.plugins.gui/index.html
+++ b/artifact_references/pages/demo.plugins.gui/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Demo.Plugins.GUI :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/demo.plugins.gui/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/demo.plugins.gui/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -417,4 +417,4 @@
                         name="test.txt") AS Upload
           FROM source()
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/elastic.events.clients/index.html b/artifact_references/pages/elastic.events.clients/index.html
index 691318d7683..e3e8c2423a9 100644
--- a/artifact_references/pages/elastic.events.clients/index.html
+++ b/artifact_references/pages/elastic.events.clients/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Elastic.Events.Clients :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/elastic.events.clients/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/elastic.events.clients/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -144,4 +144,4 @@
           disable_ssl_security=DisableSSLSecurity,
           type=&quot;ClientEvents&quot;)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/elastic.events.upload/index.html b/artifact_references/pages/elastic.events.upload/index.html
index 7d7189688ee..ae127c8288b 100644
--- a/artifact_references/pages/elastic.events.upload/index.html
+++ b/artifact_references/pages/elastic.events.upload/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Elastic.Events.Upload :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/elastic.events.upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/elastic.events.upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -158,4 +158,4 @@
           disable_ssl_security=DisableSSLSecurity,
           type="ClientEvents")
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/elastic.flows.upload/index.html b/artifact_references/pages/elastic.flows.upload/index.html
index 6b0cd18451c..1f86eaa9a0a 100644
--- a/artifact_references/pages/elastic.flows.upload/index.html
+++ b/artifact_references/pages/elastic.flows.upload/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Elastic.Flows.Upload :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/elastic.flows.upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/elastic.flows.upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -150,4 +150,4 @@
             disable_ssl_security=DisableSSLSecurity,
             type="artifact")
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.applications.chrome.sessionstorage/index.html b/artifact_references/pages/generic.applications.chrome.sessionstorage/index.html
index 4ecce57b79a..75464b0102e 100644
--- a/artifact_references/pages/generic.applications.chrome.sessionstorage/index.html
+++ b/artifact_references/pages/generic.applications.chrome.sessionstorage/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Applications.Chrome.SessionStorage :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.applications.chrome.sessionstorage/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.applications.chrome.sessionstorage/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -144,4 +144,4 @@
        FROM DumpSessionStorate(Data=Data)
     })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.applications.office.keywords/index.html b/artifact_references/pages/generic.applications.office.keywords/index.html
index 0c2fe7103f8..33a1e898ec8 100644
--- a/artifact_references/pages/generic.applications.office.keywords/index.html
+++ b/artifact_references/pages/generic.applications.office.keywords/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Applications.Office.Keywords :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.applications.office.keywords/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.applications.office.keywords/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -156,4 +156,4 @@
                  accessor='zip')
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.client.diskspace/index.html b/artifact_references/pages/generic.client.diskspace/index.html
index 1a5145f071e..842a3e1c1c7 100644
--- a/artifact_references/pages/generic.client.diskspace/index.html
+++ b/artifact_references/pages/generic.client.diskspace/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Client.DiskSpace :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.client.diskspace/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.client.diskspace/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -107,4 +107,4 @@
     then={ SELECT * FROM Windows},
     else={ SELECT * FROM NonWindows})
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.client.info/index.html b/artifact_references/pages/generic.client.info/index.html
index 76956af5804..9b10e692fb6 100644
--- a/artifact_references/pages/generic.client.info/index.html
+++ b/artifact_references/pages/generic.client.info/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Client.Info :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.client.info/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.client.info/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -256,4 +256,4 @@
   - name: LastLogin
     type: timestamp
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.client.profile/index.html b/artifact_references/pages/generic.client.profile/index.html
index 91280b923c8..732974bdb79 100644
--- a/artifact_references/pages/generic.client.profile/index.html
+++ b/artifact_references/pages/generic.client.profile/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Client.Profile :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.client.profile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.client.profile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -220,4 +220,4 @@
   - name: InUseBytes
     type: mb
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.client.rekey/index.html b/artifact_references/pages/generic.client.rekey/index.html
index fec9555a97e..c852dfbac50 100644
--- a/artifact_references/pages/generic.client.rekey/index.html
+++ b/artifact_references/pages/generic.client.rekey/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Client.Rekey :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.client.rekey/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.client.rekey/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -109,4 +109,4 @@
   - query:
       SELECT rekey(wait=Wait) FROM scope()
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.client.stats/index.html b/artifact_references/pages/generic.client.stats/index.html
index f6618a384ab..8cfc1ff924b 100644
--- a/artifact_references/pages/generic.client.stats/index.html
+++ b/artifact_references/pages/generic.client.stats/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Client.Stats :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.client.stats/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.client.stats/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -171,4 +171,4 @@
   - name: ClientId
     type: client_id
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.client.trace/index.html b/artifact_references/pages/generic.client.trace/index.html
index 3f11e72ce8c..1937754bb75 100644
--- a/artifact_references/pages/generic.client.trace/index.html
+++ b/artifact_references/pages/generic.client.trace/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Client.Trace :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.client.trace/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.client.trace/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -99,4 +99,4 @@
        FROM clock(start=0, period=FrequencySec)
     })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.client.vql/index.html b/artifact_references/pages/generic.client.vql/index.html
index 8856649d758..e8975c4ed4e 100644
--- a/artifact_references/pages/generic.client.vql/index.html
+++ b/artifact_references/pages/generic.client.vql/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Client.VQL :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.client.vql/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.client.vql/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -85,4 +85,4 @@
   - query: |
       SELECT * FROM query(query=Command)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.collectors.file/index.html b/artifact_references/pages/generic.collectors.file/index.html
index 95e780c7af6..021628b4bd3 100644
--- a/artifact_references/pages/generic.collectors.file/index.html
+++ b/artifact_references/pages/generic.collectors.file/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Collectors.File :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.collectors.file/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.collectors.file/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -159,4 +159,4 @@
                Created, Modified, LastAccessed
         FROM uploaded_files
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.collectors.sqlecmd/index.html b/artifact_references/pages/generic.collectors.sqlecmd/index.html
index e7768ccf404..b1fd4778a32 100644
--- a/artifact_references/pages/generic.collectors.sqlecmd/index.html
+++ b/artifact_references/pages/generic.collectors.sqlecmd/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Collectors.SQLECmd :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.collectors.sqlecmd/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.collectors.sqlecmd/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -5377,4 +5377,4 @@
       SQLQuery=SQLQuery, FileType=FileType,
       IdentifyQuery=IdentifyQuery, IdentifyValue=IdentifyValue)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.detection.hashhunter/index.html b/artifact_references/pages/generic.detection.hashhunter/index.html
index bd66c67d608..2d35c9357ba 100644
--- a/artifact_references/pages/generic.detection.hashhunter/index.html
+++ b/artifact_references/pages/generic.detection.hashhunter/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Detection.HashHunter :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.detection.hashhunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.detection.hashhunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -174,4 +174,4 @@
         FROM if(condition= HashSelector.Hash, then= find_files)
         WHERE 
             ( Hash.MD5 in MD5List OR Hash.SHA1 in SHA1List OR Hash.SHA256 in SHA256List )
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.detection.yara.glob/index.html b/artifact_references/pages/generic.detection.yara.glob/index.html
index a7fab9d2fd2..1460cfd4698 100644
--- a/artifact_references/pages/generic.detection.yara.glob/index.html
+++ b/artifact_references/pages/generic.detection.yara.glob/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Detection.Yara.Glob :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.detection.yara.glob/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.detection.yara.glob/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -227,4 +227,4 @@
 column_types:
   - name: HitContext
     type: preview_upload
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.detection.yara.zip/index.html b/artifact_references/pages/generic.detection.yara.zip/index.html
index 73ffbf75d66..885da5ce153 100644
--- a/artifact_references/pages/generic.detection.yara.zip/index.html
+++ b/artifact_references/pages/generic.detection.yara.zip/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Detection.Yara.Zip :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.detection.yara.zip/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.detection.yara.zip/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -213,4 +213,4 @@
 column_types:
   - name: HitContext
     type: preview_upload
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.forensic.carving.urls/index.html b/artifact_references/pages/generic.forensic.carving.urls/index.html
index 2b5aa415c40..23aedf5cb52 100644
--- a/artifact_references/pages/generic.forensic.carving.urls/index.html
+++ b/artifact_references/pages/generic.forensic.carving.urls/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Forensic.Carving.URLs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.forensic.carving.urls/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.forensic.carving.urls/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -104,4 +104,4 @@
                regex="(?P&lt;URL&gt;https?:\\/\\/[\\w\\.-]+[\\/\\w \\.-]*)")
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.forensic.hashlookup/index.html b/artifact_references/pages/generic.forensic.hashlookup/index.html
index eb17a049292..f9308f02d0b 100644
--- a/artifact_references/pages/generic.forensic.hashlookup/index.html
+++ b/artifact_references/pages/generic.forensic.hashlookup/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Forensic.HashLookup :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.forensic.hashlookup/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.forensic.hashlookup/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -118,4 +118,4 @@
          })
       }, async=TRUE)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.forensic.localhashes.glob/index.html b/artifact_references/pages/generic.forensic.localhashes.glob/index.html
index 6e1cdd8c1cb..042e7037e92 100644
--- a/artifact_references/pages/generic.forensic.localhashes.glob/index.html
+++ b/artifact_references/pages/generic.forensic.localhashes.glob/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Forensic.LocalHashes.Glob :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.forensic.localhashes.glob/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.forensic.localhashes.glob/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -137,4 +137,4 @@
       FROM insertion
       WHERE NOT SuppressOutput
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.forensic.localhashes.init/index.html b/artifact_references/pages/generic.forensic.localhashes.init/index.html
index 58d8137f86f..7adb19c0ed6 100644
--- a/artifact_references/pages/generic.forensic.localhashes.init/index.html
+++ b/artifact_references/pages/generic.forensic.localhashes.init/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Forensic.LocalHashes.Init :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.forensic.localhashes.init/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.forensic.localhashes.init/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -105,4 +105,4 @@
 
       SELECT hash_db AS OSPath FROM scope()
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.forensic.localhashes.query/index.html b/artifact_references/pages/generic.forensic.localhashes.query/index.html
index b70253ab416..d9f456dde81 100644
--- a/artifact_references/pages/generic.forensic.localhashes.query/index.html
+++ b/artifact_references/pages/generic.forensic.localhashes.query/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Forensic.LocalHashes.Query :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.forensic.localhashes.query/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.forensic.localhashes.query/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -131,4 +131,4 @@
                      args=Hash)
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.forensic.sqlitehunter/index.html b/artifact_references/pages/generic.forensic.sqlitehunter/index.html
index c1891db2bde..dfa9a11a54b 100644
--- a/artifact_references/pages/generic.forensic.sqlitehunter/index.html
+++ b/artifact_references/pages/generic.forensic.sqlitehunter/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Forensic.SQLiteHunter :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.forensic.sqlitehunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.forensic.sqlitehunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -813,4 +813,4 @@
 
 
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.forensic.timeline/index.html b/artifact_references/pages/generic.forensic.timeline/index.html
index 26a5d70808e..496f494f7f5 100644
--- a/artifact_references/pages/generic.forensic.timeline/index.html
+++ b/artifact_references/pages/generic.forensic.timeline/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Forensic.Timeline :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.forensic.timeline/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.forensic.timeline/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -106,4 +106,4 @@
                Atime, Mtime, Ctime
         FROM glob(globs=timelineGlob, accessor=timelineAccessor)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.network.interfaceaddresses/index.html b/artifact_references/pages/generic.network.interfaceaddresses/index.html
index 39e78baa2bd..81aebbb0ccf 100644
--- a/artifact_references/pages/generic.network.interfaceaddresses/index.html
+++ b/artifact_references/pages/generic.network.interfaceaddresses/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Network.InterfaceAddresses :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.network.interfaceaddresses/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.network.interfaceaddresses/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -89,4 +89,4 @@
            Flags, Addrs.IP as IP, Addrs.Mask.String as Mask
         FROM flatten(query=interface_address)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.system.efisignatures/index.html b/artifact_references/pages/generic.system.efisignatures/index.html
index 0167a7d64a5..aebd9291999 100644
--- a/artifact_references/pages/generic.system.efisignatures/index.html
+++ b/artifact_references/pages/generic.system.efisignatures/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.System.EfiSignatures :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.system.efisignatures/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.system.efisignatures/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -186,4 +186,4 @@
                   })
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.system.hostsfile/index.html b/artifact_references/pages/generic.system.hostsfile/index.html
index 32060bb8df0..561240de670 100644
--- a/artifact_references/pages/generic.system.hostsfile/index.html
+++ b/artifact_references/pages/generic.system.hostsfile/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.System.HostsFile :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.system.hostsfile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.system.hostsfile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -176,4 +176,4 @@
       WHERE Address =~ AddressRegex
         AND Hostname =~ HostnameRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.system.processsiblings/index.html b/artifact_references/pages/generic.system.processsiblings/index.html
index cde822c34cf..44f2877d547 100644
--- a/artifact_references/pages/generic.system.processsiblings/index.html
+++ b/artifact_references/pages/generic.system.processsiblings/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.System.ProcessSiblings :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.system.processsiblings/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.system.processsiblings/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -125,4 +125,4 @@
   - name: ParentTree
     type: tree
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.system.pstree/index.html b/artifact_references/pages/generic.system.pstree/index.html
index 000176f5378..2568dc1d8bd 100644
--- a/artifact_references/pages/generic.system.pstree/index.html
+++ b/artifact_references/pages/generic.system.pstree/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.System.Pstree :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.system.pstree/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.system.pstree/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -134,4 +134,4 @@
   - name: PSTree
     type: tree
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/generic.utils.fetchbinary/index.html b/artifact_references/pages/generic.utils.fetchbinary/index.html
index 9f335c70203..7b172715bb4 100644
--- a/artifact_references/pages/generic.utils.fetchbinary/index.html
+++ b/artifact_references/pages/generic.utils.fetchbinary/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Utils.FetchBinary :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.utils.fetchbinary/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/generic.utils.fetchbinary/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -232,4 +232,4 @@
         },
         d=download)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.applications.chrome.extensions.upload/index.html b/artifact_references/pages/linux.applications.chrome.extensions.upload/index.html
index 3c985fdf014..94056104610 100644
--- a/artifact_references/pages/linux.applications.chrome.extensions.upload/index.html
+++ b/artifact_references/pages/linux.applications.chrome.extensions.upload/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Applications.Chrome.Extensions.Upload :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.applications.chrome.extensions.upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.applications.chrome.extensions.upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -97,4 +97,4 @@
              FROM glob(globs=extensionGlobs, root=Homedir)
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.applications.chrome.extensions/index.html b/artifact_references/pages/linux.applications.chrome.extensions/index.html
index 4553a2ae4a4..2353dceba24 100644
--- a/artifact_references/pages/linux.applications.chrome.extensions/index.html
+++ b/artifact_references/pages/linux.applications.chrome.extensions/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Applications.Chrome.Extensions :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.applications.chrome.extensions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.applications.chrome.extensions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -202,4 +202,4 @@
 
         FROM parsed_manifest_files
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.applications.docker.info/index.html b/artifact_references/pages/linux.applications.docker.info/index.html
index 555beb9609c..1c171eb6913 100644
--- a/artifact_references/pages/linux.applications.docker.info/index.html
+++ b/artifact_references/pages/linux.applications.docker.info/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Applications.Docker.Info :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.applications.docker.info/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.applications.docker.info/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -118,4 +118,4 @@
                JSON.DockerRootDir as DockerRootDir
         FROM data
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.applications.docker.version/index.html b/artifact_references/pages/linux.applications.docker.version/index.html
index 13274dcc3ba..ead926770f6 100644
--- a/artifact_references/pages/linux.applications.docker.version/index.html
+++ b/artifact_references/pages/linux.applications.docker.version/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Applications.Docker.Version :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.applications.docker.version/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.applications.docker.version/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -95,4 +95,4 @@
                JSON.BuildTime as BuildTime
         FROM data
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.debian.aptsources/index.html b/artifact_references/pages/linux.debian.aptsources/index.html
index 73b106203b9..50540f5bd0e 100644
--- a/artifact_references/pages/linux.debian.aptsources/index.html
+++ b/artifact_references/pages/linux.debian.aptsources/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Debian.AptSources :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.debian.aptsources/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.debian.aptsources/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -607,4 +607,4 @@
                 SELECT * FROM parse_cache_or_pass
               })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.debian.packages/index.html b/artifact_references/pages/linux.debian.packages/index.html
index 508110425e3..10e9fba33eb 100644
--- a/artifact_references/pages/linux.debian.packages/index.html
+++ b/artifact_references/pages/linux.debian.packages/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Debian.Packages :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.debian.packages/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.debian.packages/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -101,4 +101,4 @@
                Record.Source as Source,
                Record.Architecture as Architecture from packages
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.detection.anomalousfiles/index.html b/artifact_references/pages/linux.detection.anomalousfiles/index.html
index dc68b055602..3558ff10fb4 100644
--- a/artifact_references/pages/linux.detection.anomalousfiles/index.html
+++ b/artifact_references/pages/linux.detection.anomalousfiles/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Detection.AnomalousFiles :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.detection.anomalousfiles/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.detection.anomalousfiles/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -114,4 +114,4 @@
       FROM glob(globs=split(string=PathsToSearch, sep_string=","))
       WHERE IsHidden OR IsLarge OR HasSUID
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.detection.yara.process/index.html b/artifact_references/pages/linux.detection.yara.process/index.html
index 27bfeff5e3e..1304b489605 100644
--- a/artifact_references/pages/linux.detection.yara.process/index.html
+++ b/artifact_references/pages/linux.detection.yara.process/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Detection.Yara.Process :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.detection.yara.process/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.detection.yara.process/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -195,4 +195,4 @@
 column_types:
   - name: HitContext
     type: preview_upload
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.events.processexecutions/index.html b/artifact_references/pages/linux.events.processexecutions/index.html
index 875c741ebc8..9216cff420b 100644
--- a/artifact_references/pages/linux.events.processexecutions/index.html
+++ b/artifact_references/pages/linux.events.processexecutions/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Events.ProcessExecutions :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.events.processexecutions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.events.processexecutions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -125,4 +125,4 @@
               Exe, CWD
        FROM exec_log
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.events.sshbruteforce/index.html b/artifact_references/pages/linux.events.sshbruteforce/index.html
index 91b953b4b17..f2d27b683ce 100644
--- a/artifact_references/pages/linux.events.sshbruteforce/index.html
+++ b/artifact_references/pages/linux.events.sshbruteforce/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Events.SSHBruteforce :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.events.sshbruteforce/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.events.sshbruteforce/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -130,4 +130,4 @@
         FROM success_login
         WHERE len(list=Failures) &gt; int(int=MinimumFailedLogins)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.events.sshlogin/index.html b/artifact_references/pages/linux.events.sshlogin/index.html
index fef5cf83e2d..d551f8237e1 100644
--- a/artifact_references/pages/linux.events.sshlogin/index.html
+++ b/artifact_references/pages/linux.events.sshlogin/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Events.SSHLogin :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.events.sshlogin/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.events.sshlogin/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -104,4 +104,4 @@
               Event.pid AS Pid
         FROM success_login
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.forensics.journal/index.html b/artifact_references/pages/linux.forensics.journal/index.html
index e8bb6ea095d..66b480ee4cd 100644
--- a/artifact_references/pages/linux.forensics.journal/index.html
+++ b/artifact_references/pages/linux.forensics.journal/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Forensics.Journal :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.forensics.journal/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.forensics.journal/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -205,4 +205,4 @@
       FROM ParseFile(File=OSPath)
     })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.kapefiles.collectfromdirectory/index.html b/artifact_references/pages/linux.kapefiles.collectfromdirectory/index.html
index 0864d75b054..57e326f4afc 100644
--- a/artifact_references/pages/linux.kapefiles.collectfromdirectory/index.html
+++ b/artifact_references/pages/linux.kapefiles.collectfromdirectory/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.KapeFiles.CollectFromDirectory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.kapefiles.collectfromdirectory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.kapefiles.collectfromdirectory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -2577,4 +2577,4 @@
       {{ Query $query | Table }}
 
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.mounts/index.html b/artifact_references/pages/linux.mounts/index.html
index c308c0b88d3..6ae7e758908 100644
--- a/artifact_references/pages/linux.mounts/index.html
+++ b/artifact_references/pages/linux.mounts/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Mounts :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.mounts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.mounts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -96,4 +96,4 @@
 
       {{ Query "SELECT * FROM source()" | Table }}
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.network.netstat/index.html b/artifact_references/pages/linux.network.netstat/index.html
index e3243ba6807..76eeaf421c7 100644
--- a/artifact_references/pages/linux.network.netstat/index.html
+++ b/artifact_references/pages/linux.network.netstat/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Network.Netstat :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.network.netstat/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.network.netstat/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -146,4 +146,4 @@
         WHERE sl =~ ":"  -- Remove header row
           AND State =~ StateRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.network.netstatenriched/index.html b/artifact_references/pages/linux.network.netstatenriched/index.html
index b957f73ba0c..9d831f7aec1 100644
--- a/artifact_references/pages/linux.network.netstatenriched/index.html
+++ b/artifact_references/pages/linux.network.netstatenriched/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Network.NetstatEnriched :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.network.netstatenriched/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.network.netstatenriched/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -139,4 +139,4 @@
   - name: ChildrenTree
     type: tree
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.network.packetcapture/index.html b/artifact_references/pages/linux.network.packetcapture/index.html
index fc07a08c286..fb3531de3d3 100644
--- a/artifact_references/pages/linux.network.packetcapture/index.html
+++ b/artifact_references/pages/linux.network.packetcapture/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Network.PacketCapture :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.network.packetcapture/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.network.packetcapture/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -107,4 +107,4 @@
             SELECT *, upload(file=pcap) AS PCAP
               FROM execve(argv=['bash', '-c', format(format='''(tcpdump -nni %v -w %v %v) &amp; sleep %v; kill $!''', args=[Interface, pcap, BPF, Duration])], length=1000000)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.osquery.generic/index.html b/artifact_references/pages/linux.osquery.generic/index.html
index 67ec7da43e1..e3ab3fe1bec 100644
--- a/artifact_references/pages/linux.osquery.generic/index.html
+++ b/artifact_references/pages/linux.osquery.generic/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.OSQuery.Generic :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.osquery.generic/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.osquery.generic/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -111,4 +111,4 @@
          SELECT * FROM parse_json_array(data=Stdout)
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.proc.arp/index.html b/artifact_references/pages/linux.proc.arp/index.html
index 04a82d227b7..c7354512e1e 100644
--- a/artifact_references/pages/linux.proc.arp/index.html
+++ b/artifact_references/pages/linux.proc.arp/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Proc.Arp :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.proc.arp/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.proc.arp/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -85,4 +85,4 @@
            regex='\\s{3,20}',
            first_row_is_headers=true)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.proc.modules/index.html b/artifact_references/pages/linux.proc.modules/index.html
index cbbe4735c8f..1f7e8553b56 100644
--- a/artifact_references/pages/linux.proc.modules/index.html
+++ b/artifact_references/pages/linux.proc.modules/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Proc.Modules :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.proc.modules/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.proc.modules/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -92,4 +92,4 @@
            regex='\\s+',
            columns=['Name', 'Size', 'UseCount', 'UsedBy', 'Status', 'Address'])
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.remediation.quarantine/index.html b/artifact_references/pages/linux.remediation.quarantine/index.html
index 7cef14c3477..451787b8b5f 100644
--- a/artifact_references/pages/linux.remediation.quarantine/index.html
+++ b/artifact_references/pages/linux.remediation.quarantine/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Remediation.Quarantine :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.remediation.quarantine/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.remediation.quarantine/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -308,4 +308,4 @@
             AND FALSE
        })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.rhel.packages/index.html b/artifact_references/pages/linux.rhel.packages/index.html
index 64bceb7684c..2585e31e37d 100644
--- a/artifact_references/pages/linux.rhel.packages/index.html
+++ b/artifact_references/pages/linux.rhel.packages/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.RHEL.Packages :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.rhel.packages/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.rhel.packages/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -90,4 +90,4 @@
           WHERE count() &gt; 2
         }, column="Parsed")
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.search.filefinder/index.html b/artifact_references/pages/linux.search.filefinder/index.html
index 82b4df453f0..f09d52f1bf2 100644
--- a/artifact_references/pages/linux.search.filefinder/index.html
+++ b/artifact_references/pages/linux.search.filefinder/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Search.FileFinder :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.search.filefinder/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.search.filefinder/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -282,4 +282,4 @@
   - name: Upload
     type: preview_upload
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526431></script><script src=/js/perfect-scrollbar.min.js?1699526431></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526431></script><script src=/js/jquery.sticky.js?1699526431></script><script src=/js/featherlight.min.js?1699526431></script><script src=/js/highlight.min.js?1699526431></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526431></script><script src=/js/learn.js?1699526431></script><script src=/js/hugo-learn.js?1699526431></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.ssh.authorizedkeys/index.html b/artifact_references/pages/linux.ssh.authorizedkeys/index.html
index e5da5fb4347..1f9b98fb4a6 100644
--- a/artifact_references/pages/linux.ssh.authorizedkeys/index.html
+++ b/artifact_references/pages/linux.ssh.authorizedkeys/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Ssh.AuthorizedKeys :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.ssh.authorizedkeys/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.ssh.authorizedkeys/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -100,4 +100,4 @@
                WHERE Type =~ "ssh"
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.ssh.knownhosts/index.html b/artifact_references/pages/linux.ssh.knownhosts/index.html
index 2a59b5b6040..6921e65d12d 100644
--- a/artifact_references/pages/linux.ssh.knownhosts/index.html
+++ b/artifact_references/pages/linux.ssh.knownhosts/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Ssh.KnownHosts :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526431 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526431 rel=stylesheet><link href=/css/featherlight.min.css?1699526431 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526431 rel=stylesheet><link href=/css/auto-complete.css?1699526431 rel=stylesheet><link href=/css/theme.css?1699526431 rel=stylesheet><link href=/css/tabs.css?1699526431 rel=stylesheet><link href=/css/hugo-theme.css?1699526431 rel=stylesheet><link href=/css/theme-mine.css?1699526431 rel=stylesheet><link href=/css/dark.css?1699526431 rel=stylesheet><link href=/css/syntax.css?1699526431 rel=stylesheet><link href=/css/light.css?1699526431 rel=stylesheet><link href=/css/hljs.css?1699526431 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526431 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526431></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.ssh.knownhosts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.ssh.knownhosts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -147,4 +147,4 @@
           SELECT *, get(item=lookup, field=PublicKey) AS Hostname
           FROM source(artifact="Linux.Ssh.KnownHosts")
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.ssh.privatekeys/index.html b/artifact_references/pages/linux.ssh.privatekeys/index.html
index a7479885c46..764e57fe6a3 100644
--- a/artifact_references/pages/linux.ssh.privatekeys/index.html
+++ b/artifact_references/pages/linux.ssh.privatekeys/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Ssh.PrivateKeys :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.ssh.privatekeys/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.ssh.privatekeys/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -216,4 +216,4 @@
           })
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.suse.packages/index.html b/artifact_references/pages/linux.suse.packages/index.html
index 66bbec8e6cd..6d1d6f1c4d8 100644
--- a/artifact_references/pages/linux.suse.packages/index.html
+++ b/artifact_references/pages/linux.suse.packages/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.SuSE.Packages :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.suse.packages/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.suse.packages/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -100,4 +100,4 @@
           FROM _value
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.sys.acpitables/index.html b/artifact_references/pages/linux.sys.acpitables/index.html
index 3c178fee9c4..58de0b4af98 100644
--- a/artifact_references/pages/linux.sys.acpitables/index.html
+++ b/artifact_references/pages/linux.sys.acpitables/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Sys.ACPITables :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.acpitables/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.acpitables/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -86,4 +86,4 @@
 
         SELECT Name, Size, Hash.MD5, Hash.SHA1, Hash.SHA256 from hashes
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.sys.bashhistory/index.html b/artifact_references/pages/linux.sys.bashhistory/index.html
index 766010b2715..5c447ee58a5 100644
--- a/artifact_references/pages/linux.sys.bashhistory/index.html
+++ b/artifact_references/pages/linux.sys.bashhistory/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Sys.BashHistory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.bashhistory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.bashhistory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -114,4 +114,4 @@
                     else= FALSE)
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.sys.bashshell/index.html b/artifact_references/pages/linux.sys.bashshell/index.html
index 0b437828c11..4fe436fea6b 100644
--- a/artifact_references/pages/linux.sys.bashshell/index.html
+++ b/artifact_references/pages/linux.sys.bashshell/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Sys.BashShell :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.bashshell/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.bashshell/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -101,4 +101,4 @@
   - query: |
       SELECT * FROM execve(argv=["/bin/bash", "-c", Command])
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.sys.cputime/index.html b/artifact_references/pages/linux.sys.cputime/index.html
index 9e6596dff04..741aae48865 100644
--- a/artifact_references/pages/linux.sys.cputime/index.html
+++ b/artifact_references/pages/linux.sys.cputime/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Sys.CPUTime :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.cputime/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.cputime/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -102,4 +102,4 @@
                atoi(string=guest) as Guest,
                atoi(string=guest_nice) as GuestNice FROM raw
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.sys.crontab/index.html b/artifact_references/pages/linux.sys.crontab/index.html
index cef762af1ba..9acb3996e65 100644
--- a/artifact_references/pages/linux.sys.crontab/index.html
+++ b/artifact_references/pages/linux.sys.crontab/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Sys.Crontab :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.crontab/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.crontab/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -132,4 +132,4 @@
       SELECT OSPath, upload(file=OSPath) AS Upload
       FROM glob(globs=split(string=cronTabGlob + "," + cronTabScripts, sep=","))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.sys.lastuserlogin/index.html b/artifact_references/pages/linux.sys.lastuserlogin/index.html
index 9504a7043a9..1fc04ac118d 100644
--- a/artifact_references/pages/linux.sys.lastuserlogin/index.html
+++ b/artifact_references/pages/linux.sys.lastuserlogin/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Sys.LastUserLogin :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.lastuserlogin/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.lastuserlogin/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -146,4 +146,4 @@
         })
       }) WHERE Type != "EMPTY" AND PID != 0
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.sys.loghunter/index.html b/artifact_references/pages/linux.sys.loghunter/index.html
index e55fe3fb97a..ffc87b76d4c 100644
--- a/artifact_references/pages/linux.sys.loghunter/index.html
+++ b/artifact_references/pages/linux.sys.loghunter/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Sys.LogHunter :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.loghunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.loghunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -133,4 +133,4 @@
            SELECT * FROM hits
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.sys.maps/index.html b/artifact_references/pages/linux.sys.maps/index.html
index a3d94f20ab5..13bc08b43a9 100644
--- a/artifact_references/pages/linux.sys.maps/index.html
+++ b/artifact_references/pages/linux.sys.maps/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Sys.Maps :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.maps/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.maps/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -117,4 +117,4 @@
             )
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.sys.pslist/index.html b/artifact_references/pages/linux.sys.pslist/index.html
index 1c85f754080..758e20490cb 100644
--- a/artifact_references/pages/linux.sys.pslist/index.html
+++ b/artifact_references/pages/linux.sys.pslist/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Sys.Pslist :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.pslist/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.pslist/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -95,4 +95,4 @@
         FROM process_tracker_pslist()
         WHERE Name =~ processRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.sys.services/index.html b/artifact_references/pages/linux.sys.services/index.html
index d64a5601d1e..d7cacea64b3 100644
--- a/artifact_references/pages/linux.sys.services/index.html
+++ b/artifact_references/pages/linux.sys.services/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Sys.Services :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.services/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.services/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -86,4 +86,4 @@
         SELECT * FROM foreach(row=all_services, column="Parsed") WHERE Unit =~ ".service"
         
         
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.sys.suid/index.html b/artifact_references/pages/linux.sys.suid/index.html
index 261c4beb6a9..ad3afb20f71 100644
--- a/artifact_references/pages/linux.sys.suid/index.html
+++ b/artifact_references/pages/linux.sys.suid/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Sys.SUID :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.suid/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.suid/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -126,4 +126,4 @@
                Sys.Gid AS GroupID
       FROM glob(globs=GlobExpression) WHERE Mode =~ '^g|u'
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.sys.users/index.html b/artifact_references/pages/linux.sys.users/index.html
index bf67d670bbe..de5e031bc70 100644
--- a/artifact_references/pages/linux.sys.users/index.html
+++ b/artifact_references/pages/linux.sys.users/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Sys.Users :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.users/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.sys.users/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -86,4 +86,4 @@
             regex=":", record_regex="\n",
             columns=["User", "X", "Uid", "Gid", "Description", "Homedir", "Shell"])
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.syslog.sshlogin/index.html b/artifact_references/pages/linux.syslog.sshlogin/index.html
index ff5eed38474..15297d2ed20 100644
--- a/artifact_references/pages/linux.syslog.sshlogin/index.html
+++ b/artifact_references/pages/linux.syslog.sshlogin/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Syslog.SSHLogin :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.syslog.sshlogin/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.syslog.sshlogin/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -106,4 +106,4 @@
               WHERE Event.program = "sshd"
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.triage.processmemory/index.html b/artifact_references/pages/linux.triage.processmemory/index.html
index 93205868b9e..04d9ca69a2d 100644
--- a/artifact_references/pages/linux.triage.processmemory/index.html
+++ b/artifact_references/pages/linux.triage.processmemory/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Triage.ProcessMemory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.triage.processmemory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.triage.processmemory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -88,4 +88,4 @@
                     accessor="process") as CrashDump
       FROM pslist(pid=processPid)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.users.interactiveusers/index.html b/artifact_references/pages/linux.users.interactiveusers/index.html
index b8e11c297ce..9583eb3dd9a 100644
--- a/artifact_references/pages/linux.users.interactiveusers/index.html
+++ b/artifact_references/pages/linux.users.interactiveusers/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Users.InteractiveUsers :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.users.interactiveusers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.users.interactiveusers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -102,4 +102,4 @@
       FROM Artifact.Linux.Sys.Users()
       WHERE NOT Shell IN split(string=NonInteractiveExecutables, sep_string=",")
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/linux.users.rootusers/index.html b/artifact_references/pages/linux.users.rootusers/index.html
index 179babf7bc6..0eb3408f11d 100644
--- a/artifact_references/pages/linux.users.rootusers/index.html
+++ b/artifact_references/pages/linux.users.rootusers/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Users.RootUsers :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.users.rootusers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/linux.users.rootusers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -105,4 +105,4 @@
         }
       )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/logscale.events.clients/index.html b/artifact_references/pages/logscale.events.clients/index.html
index 84c192a7f25..44a3a8b60bd 100644
--- a/artifact_references/pages/logscale.events.clients/index.html
+++ b/artifact_references/pages/logscale.events.clients/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>LogScale.Events.Clients :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/logscale.events.clients/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/logscale.events.clients/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -150,4 +150,4 @@
           debug=debug,
           stats_interval=statsInterval)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/logscale.flows.upload/index.html b/artifact_references/pages/logscale.flows.upload/index.html
index c9e35c00997..704f6f1c3d8 100644
--- a/artifact_references/pages/logscale.flows.upload/index.html
+++ b/artifact_references/pages/logscale.flows.upload/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>LogScale.Flows.Upload :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/logscale.flows.upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/logscale.flows.upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -154,4 +154,4 @@
           debug=debug,
           stats_interval=statsInterval)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/macos.applications.chrome.history/index.html b/artifact_references/pages/macos.applications.chrome.history/index.html
index 5a2f30a8063..a843ca70a25 100644
--- a/artifact_references/pages/macos.applications.chrome.history/index.html
+++ b/artifact_references/pages/macos.applications.chrome.history/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Applications.Chrome.History :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.applications.chrome.history/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.applications.chrome.history/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -113,4 +113,4 @@
              query=urlSQLQuery)
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/macos.applications.mru/index.html b/artifact_references/pages/macos.applications.mru/index.html
index f64719d365f..80bb67fcb60 100644
--- a/artifact_references/pages/macos.applications.mru/index.html
+++ b/artifact_references/pages/macos.applications.mru/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Applications.MRU :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.applications.mru/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.applications.mru/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -234,4 +234,4 @@
           })
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/macos.detection.autoruns/index.html b/artifact_references/pages/macos.detection.autoruns/index.html
index f371c742a65..3ef011eb065 100644
--- a/artifact_references/pages/macos.detection.autoruns/index.html
+++ b/artifact_references/pages/macos.detection.autoruns/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Detection.Autoruns :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.detection.autoruns/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.detection.autoruns/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -215,4 +215,4 @@
            upload(file=OSPath) AS Upload
     FROM glob(globs=parse_json_array(data=LoginItemsGlobs))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/macos.detection.installhistory/index.html b/artifact_references/pages/macos.detection.installhistory/index.html
index d3267357eec..e742373224e 100644
--- a/artifact_references/pages/macos.detection.installhistory/index.html
+++ b/artifact_references/pages/macos.detection.installhistory/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Detection.InstallHistory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.detection.installhistory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.detection.installhistory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -104,4 +104,4 @@
             })
     SELECT * FROM foreach(row=SWplist, query=SoftwareDetails)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/macos.forensics.appledoublezip/index.html b/artifact_references/pages/macos.forensics.appledoublezip/index.html
index eaec8fb9222..1739f03138a 100644
--- a/artifact_references/pages/macos.forensics.appledoublezip/index.html
+++ b/artifact_references/pages/macos.forensics.appledoublezip/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Forensics.AppleDoubleZip :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.forensics.appledoublezip/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.forensics.appledoublezip/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -208,4 +208,4 @@
        FROM ParseAppleDouble(double_data=read_file(filename=OSPath, accessor="zip"))
      })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/macos.forensics.fsevents/index.html b/artifact_references/pages/macos.forensics.fsevents/index.html
index 0bb74862e05..318b17aeb7a 100644
--- a/artifact_references/pages/macos.forensics.fsevents/index.html
+++ b/artifact_references/pages/macos.forensics.fsevents/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Forensics.FSEvents :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.forensics.fsevents/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.forensics.fsevents/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -165,4 +165,4 @@
       })
       WHERE path =~ PathRegex AND flags =~ FlagsRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/macos.network.packetcapture/index.html b/artifact_references/pages/macos.network.packetcapture/index.html
index 062a8628e01..f82b2a22ec4 100644
--- a/artifact_references/pages/macos.network.packetcapture/index.html
+++ b/artifact_references/pages/macos.network.packetcapture/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Network.PacketCapture :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.network.packetcapture/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.network.packetcapture/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -107,4 +107,4 @@
             SELECT *, upload(file=pcap) AS PCAP
               FROM execve(argv=['bash', '-c', format(format='''(tcpdump -nni %v -w %v %v) &amp; sleep %v; kill $!''', args=[Interface, pcap, BPF, Duration])], length=1000000)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/macos.osquery.generic/index.html b/artifact_references/pages/macos.osquery.generic/index.html
index b5a0eb09904..e03e42b014a 100644
--- a/artifact_references/pages/macos.osquery.generic/index.html
+++ b/artifact_references/pages/macos.osquery.generic/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.OSQuery.Generic :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.osquery.generic/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.osquery.generic/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -111,4 +111,4 @@
          SELECT * FROM parse_json_array(data=Stdout)
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/macos.search.filefinder/index.html b/artifact_references/pages/macos.search.filefinder/index.html
index 38bd93e6606..c8006bc2cfb 100644
--- a/artifact_references/pages/macos.search.filefinder/index.html
+++ b/artifact_references/pages/macos.search.filefinder/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Search.FileFinder :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.search.filefinder/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.search.filefinder/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -223,4 +223,4 @@
   - name: Upload
     type: preview_upload
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/macos.system.dock/index.html b/artifact_references/pages/macos.system.dock/index.html
index 06f2835e16d..c9528edf1cf 100644
--- a/artifact_references/pages/macos.system.dock/index.html
+++ b/artifact_references/pages/macos.system.dock/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.System.Dock :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.system.dock/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.system.dock/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -119,4 +119,4 @@
   - name: Book
     type: base64hex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/macos.system.packages/index.html b/artifact_references/pages/macos.system.packages/index.html
index 5ce906c94f2..22ea8b34d8b 100644
--- a/artifact_references/pages/macos.system.packages/index.html
+++ b/artifact_references/pages/macos.system.packages/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.System.Packages :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.system.packages/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.system.packages/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -97,4 +97,4 @@
         FROM foreach(
            row=packages[0].Json.SPApplicationsDataType)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/macos.system.plist/index.html b/artifact_references/pages/macos.system.plist/index.html
index 0fa81a21479..5d81aee1ba6 100644
--- a/artifact_references/pages/macos.system.plist/index.html
+++ b/artifact_references/pages/macos.system.plist/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.System.Plist :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.system.plist/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.system.plist/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -108,4 +108,4 @@
                        btime=Btime)) AS Upload
       FROM glob(globs=PlistGlob)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/macos.system.quarantineevents/index.html b/artifact_references/pages/macos.system.quarantineevents/index.html
index 65eb420e891..004868e22ec 100644
--- a/artifact_references/pages/macos.system.quarantineevents/index.html
+++ b/artifact_references/pages/macos.system.quarantineevents/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.System.QuarantineEvents :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.system.quarantineevents/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.system.quarantineevents/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -117,4 +117,4 @@
 
       SELECT * FROM foreach(row=QList, query=QEventsDetails)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/macos.system.tcc/index.html b/artifact_references/pages/macos.system.tcc/index.html
index 3e87cb8fb98..d0c38108019 100644
--- a/artifact_references/pages/macos.system.tcc/index.html
+++ b/artifact_references/pages/macos.system.tcc/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.System.TCC :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.system.tcc/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.system.tcc/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -129,4 +129,4 @@
           )
       SELECT * FROM foreach(row=TCCList, query=TCCAccessDetails)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/macos.system.timemachine/index.html b/artifact_references/pages/macos.system.timemachine/index.html
index 4fe00ddff11..36721c89259 100644
--- a/artifact_references/pages/macos.system.timemachine/index.html
+++ b/artifact_references/pages/macos.system.timemachine/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.System.TimeMachine :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.system.timemachine/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.system.timemachine/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -99,4 +99,4 @@
             )
       SELECT * FROM foreach(row=TMPlist, query=TMDetails)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/macos.system.users/index.html b/artifact_references/pages/macos.system.users/index.html
index 62a1f054e47..c91ac96259d 100644
--- a/artifact_references/pages/macos.system.users/index.html
+++ b/artifact_references/pages/macos.system.users/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.System.Users :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.system.users/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.system.users/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -110,4 +110,4 @@
       })
       WHERE NOT OnlyShowRealUsers OR NOT UserShell =~ 'false'
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/macos.system.wifi/index.html b/artifact_references/pages/macos.system.wifi/index.html
index 2bf6426adfc..e013439fd40 100644
--- a/artifact_references/pages/macos.system.wifi/index.html
+++ b/artifact_references/pages/macos.system.wifi/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.System.Wifi :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.system.wifi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/macos.system.wifi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -106,4 +106,4 @@
              Value AS _Data
       FROM EachNetwork
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/network.externalipaddress/index.html b/artifact_references/pages/network.externalipaddress/index.html
index 13f3e42aa78..c34addfe51c 100644
--- a/artifact_references/pages/network.externalipaddress/index.html
+++ b/artifact_references/pages/network.externalipaddress/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Network.ExternalIpAddress :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/network.externalipaddress/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/network.externalipaddress/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -81,4 +81,4 @@
     query: |
         SELECT Content as IP from http_client(url=externalUrl)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/reporting.default/index.html b/artifact_references/pages/reporting.default/index.html
index 36a90c57154..f80dd621f44 100644
--- a/artifact_references/pages/reporting.default/index.html
+++ b/artifact_references/pages/reporting.default/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Reporting.Default :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/reporting.default/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/reporting.default/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -468,4 +468,4 @@
         &lt;/body&gt;
        &lt;/html&gt;
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/reporting.hunts.details/index.html b/artifact_references/pages/reporting.hunts.details/index.html
index 06db1e4f32b..9be00b34795 100644
--- a/artifact_references/pages/reporting.hunts.details/index.html
+++ b/artifact_references/pages/reporting.hunts.details/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Reporting.Hunts.Details :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/reporting.hunts.details/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/reporting.hunts.details/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -98,4 +98,4 @@
 
         SELECT * from foreach(row=hunts, query=flows)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.alerts.notification/index.html b/artifact_references/pages/server.alerts.notification/index.html
index 41f266fa9d8..8ceedbcf3cb 100644
--- a/artifact_references/pages/server.alerts.notification/index.html
+++ b/artifact_references/pages/server.alerts.notification/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Alerts.Notification :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.alerts.notification/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.alerts.notification/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -103,4 +103,4 @@
             url=token_url)
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.alerts.processcreation/index.html b/artifact_references/pages/server.alerts.processcreation/index.html
index 0e791d89197..fe19a33f3ce 100644
--- a/artifact_references/pages/server.alerts.processcreation/index.html
+++ b/artifact_references/pages/server.alerts.processcreation/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Alerts.ProcessCreation :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.alerts.processcreation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.alerts.processcreation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -103,4 +103,4 @@
             url=token_url)
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.alerts.psexec/index.html b/artifact_references/pages/server.alerts.psexec/index.html
index f29d1443837..c58edbd6fc2 100644
--- a/artifact_references/pages/server.alerts.psexec/index.html
+++ b/artifact_references/pages/server.alerts.psexec/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Alerts.PsExec :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.alerts.psexec/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.alerts.psexec/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -112,4 +112,4 @@
           )
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.alerts.thehive.alert/index.html b/artifact_references/pages/server.alerts.thehive.alert/index.html
index b52e830f6b5..2d8d068bee1 100644
--- a/artifact_references/pages/server.alerts.thehive.alert/index.html
+++ b/artifact_references/pages/server.alerts.thehive.alert/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Alerts.TheHive.Alert :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.alerts.thehive.alert/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.alerts.thehive.alert/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -125,4 +125,4 @@
           url=format(format="%v/api/alert", args=[TheHiveURL]))
        })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.alerts.thehive.case/index.html b/artifact_references/pages/server.alerts.thehive.case/index.html
index bd3e5502593..977241d97ab 100644
--- a/artifact_references/pages/server.alerts.thehive.case/index.html
+++ b/artifact_references/pages/server.alerts.thehive.case/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Alerts.TheHive.Case :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.alerts.thehive.case/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.alerts.thehive.case/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -127,4 +127,4 @@
           url=format(format="%v/api/case/%v/artifact", args=[TheHiveURL, CaseID]))
        })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.alerts.trackaccount/index.html b/artifact_references/pages/server.alerts.trackaccount/index.html
index df926121d91..78593c0bec5 100644
--- a/artifact_references/pages/server.alerts.trackaccount/index.html
+++ b/artifact_references/pages/server.alerts.trackaccount/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Alerts.Trackaccount :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.alerts.trackaccount/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.alerts.trackaccount/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -103,4 +103,4 @@
             url=token_url)
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.alerts.winpmem/index.html b/artifact_references/pages/server.alerts.winpmem/index.html
index bfdccac88a2..6f5a8fea3ed 100644
--- a/artifact_references/pages/server.alerts.winpmem/index.html
+++ b/artifact_references/pages/server.alerts.winpmem/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Alerts.WinPmem :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.alerts.winpmem/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.alerts.winpmem/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -110,4 +110,4 @@
           )
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.audit.logs/index.html b/artifact_references/pages/server.audit.logs/index.html
index 009bdb030c8..520bac80819 100644
--- a/artifact_references/pages/server.audit.logs/index.html
+++ b/artifact_references/pages/server.audit.logs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Audit.Logs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.audit.logs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.audit.logs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -82,4 +82,4 @@
 
 type: SERVER_EVENT
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.enrichment.cortexanalyzer/index.html b/artifact_references/pages/server.enrichment.cortexanalyzer/index.html
index ca555387403..a2ad66448dd 100644
--- a/artifact_references/pages/server.enrichment.cortexanalyzer/index.html
+++ b/artifact_references/pages/server.enrichment.cortexanalyzer/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Enrichment.CortexAnalyzer :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.enrichment.cortexanalyzer/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.enrichment.cortexanalyzer/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -168,4 +168,4 @@
         LET REPORT = SELECT parse_json(data=Resp) AS Details FROM GETREPORT
         SELECT Observable, Details.workerName as AnalyzerName, Details as _Details, Details.report AS Report FROM foreach(row=ANALYZERS_MATCH_TYPE, query={SELECT * FROM REPORT})
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.enrichment.geoip/index.html b/artifact_references/pages/server.enrichment.geoip/index.html
index 20af79e1bcf..6c0cd9be9e9 100644
--- a/artifact_references/pages/server.enrichment.geoip/index.html
+++ b/artifact_references/pages/server.enrichment.geoip/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Enrichment.GeoIP :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.enrichment.geoip/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.enrichment.geoip/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -107,4 +107,4 @@
              City(IP=_value) AS City
       FROM foreach(row=IP)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.enrichment.geoipisp/index.html b/artifact_references/pages/server.enrichment.geoipisp/index.html
index 8ac406f8911..440166b6b6f 100644
--- a/artifact_references/pages/server.enrichment.geoipisp/index.html
+++ b/artifact_references/pages/server.enrichment.geoipisp/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Enrichment.GeoIPISP :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.enrichment.geoipisp/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.enrichment.geoipisp/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -109,4 +109,4 @@
              ASO(IP=_value) AS ASO
       FROM foreach(row=IP)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.enrichment.greynoise/index.html b/artifact_references/pages/server.enrichment.greynoise/index.html
index 1426eb9ffa4..c746856092a 100644
--- a/artifact_references/pages/server.enrichment.greynoise/index.html
+++ b/artifact_references/pages/server.enrichment.greynoise/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Enrichment.GreyNoise :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.enrichment.greynoise/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.enrichment.greynoise/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -112,4 +112,4 @@
             GreyNoiseLookup AS _GreyNoiseLookup
         FROM Data
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.enrichment.hybridanalysis/index.html b/artifact_references/pages/server.enrichment.hybridanalysis/index.html
index 76a0b688f92..1906699f37f 100644
--- a/artifact_references/pages/server.enrichment.hybridanalysis/index.html
+++ b/artifact_references/pages/server.enrichment.hybridanalysis/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Enrichment.HybridAnalysis :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.enrichment.hybridanalysis/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.enrichment.hybridanalysis/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -125,4 +125,4 @@
                 FROM scope()
             })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.enrichment.virustotal/index.html b/artifact_references/pages/server.enrichment.virustotal/index.html
index 76f5c53769e..ca0087ec12d 100644
--- a/artifact_references/pages/server.enrichment.virustotal/index.html
+++ b/artifact_references/pages/server.enrichment.virustotal/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Enrichment.Virustotal :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.enrichment.virustotal/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.enrichment.virustotal/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -119,4 +119,4 @@
             VTData AS _Data
         FROM Data
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.hunts.addflow/index.html b/artifact_references/pages/server.hunts.addflow/index.html
index 595382d0483..3cc3f3c1b88 100644
--- a/artifact_references/pages/server.hunts.addflow/index.html
+++ b/artifact_references/pages/server.hunts.addflow/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Hunts.AddFlow :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.hunts.addflow/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.hunts.addflow/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -102,4 +102,4 @@
          log(message="&lt;red&gt;ERROR&lt;/&gt;: You must set HuntId, ClientId and FlowId.") AND FALSE
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.hunts.cancelanddelete/index.html b/artifact_references/pages/server.hunts.cancelanddelete/index.html
index 2290beca978..ca352170f1c 100644
--- a/artifact_references/pages/server.hunts.cancelanddelete/index.html
+++ b/artifact_references/pages/server.hunts.cancelanddelete/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Hunts.CancelAndDelete :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.hunts.cancelanddelete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.hunts.cancelanddelete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -126,4 +126,4 @@
     query: |
       SELECT * FROM hunt_delete(hunt_id=HuntId, really_do_it=DeleteAllFiles)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.hunts.list/index.html b/artifact_references/pages/server.hunts.list/index.html
index 48c3c01203a..0cb2af2f1eb 100644
--- a/artifact_references/pages/server.hunts.list/index.html
+++ b/artifact_references/pages/server.hunts.list/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Hunts.List :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.hunts.list/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.hunts.list/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -84,4 +84,4 @@
              state
       FROM hunts()
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.hunts.results/index.html b/artifact_references/pages/server.hunts.results/index.html
index e81f7184e01..09ff524dd5e 100644
--- a/artifact_references/pages/server.hunts.results/index.html
+++ b/artifact_references/pages/server.hunts.results/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Hunts.Results :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.hunts.results/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.hunts.results/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -85,4 +85,4 @@
   - query: |
       SELECT * FROM hunt_results(hunt_id=huntId, artifact=ArtifactName)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.import.artifactexchange/index.html b/artifact_references/pages/server.import.artifactexchange/index.html
index 0076c8a7612..3a9c311b855 100644
--- a/artifact_references/pages/server.import.artifactexchange/index.html
+++ b/artifact_references/pages/server.import.artifactexchange/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Import.ArtifactExchange :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.import.artifactexchange/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.import.artifactexchange/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -110,4 +110,4 @@
                Definition.author AS Author
         FROM X
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.import.deleteartifacts/index.html b/artifact_references/pages/server.import.deleteartifacts/index.html
index 853e0a9b0e0..38e91f21667 100644
--- a/artifact_references/pages/server.import.deleteartifacts/index.html
+++ b/artifact_references/pages/server.import.deleteartifacts/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Import.DeleteArtifacts :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.import.deleteartifacts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.import.deleteartifacts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -99,4 +99,4 @@
       WHERE NOT built_in
         AND name =~ ArtifactRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.import.previousreleases/index.html b/artifact_references/pages/server.import.previousreleases/index.html
index 420d23bf797..34018be4e85 100644
--- a/artifact_references/pages/server.import.previousreleases/index.html
+++ b/artifact_references/pages/server.import.previousreleases/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Import.PreviousReleases :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.import.previousreleases/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.import.previousreleases/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -147,4 +147,4 @@
                Definition.author AS Author
         FROM X
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.information.clients/index.html b/artifact_references/pages/server.information.clients/index.html
index cbfd4f945a6..e13ce9919ac 100644
--- a/artifact_references/pages/server.information.clients/index.html
+++ b/artifact_references/pages/server.information.clients/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Information.Clients :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.information.clients/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.information.clients/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -98,4 +98,4 @@
         FROM clients(count=100000)
         ORDER BY _LastSeenAt DESC
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.information.users/index.html b/artifact_references/pages/server.information.users/index.html
index 9603f988c15..ec3ef7aaf6c 100644
--- a/artifact_references/pages/server.information.users/index.html
+++ b/artifact_references/pages/server.information.users/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Information.Users :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.information.users/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.information.users/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -114,4 +114,4 @@
 
         SELECT * FROM foreach(row=clients, query=users)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.alerts/index.html b/artifact_references/pages/server.internal.alerts/index.html
index f54b5b53b67..c391eed6ce0 100644
--- a/artifact_references/pages/server.internal.alerts/index.html
+++ b/artifact_references/pages/server.internal.alerts/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.Alerts :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.alerts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.alerts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -82,4 +82,4 @@
 
 type: SERVER_EVENT
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.artifactdescription/index.html b/artifact_references/pages/server.internal.artifactdescription/index.html
index 55352dd4b42..9efb3e33190 100644
--- a/artifact_references/pages/server.internal.artifactdescription/index.html
+++ b/artifact_references/pages/server.internal.artifactdescription/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.ArtifactDescription :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.artifactdescription/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.artifactdescription/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -190,4 +190,4 @@
 
       {{ end }}
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.artifactmodification/index.html b/artifact_references/pages/server.internal.artifactmodification/index.html
index 39e588bf55a..1680a55fb1d 100644
--- a/artifact_references/pages/server.internal.artifactmodification/index.html
+++ b/artifact_references/pages/server.internal.artifactmodification/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.ArtifactModification :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.artifactmodification/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.artifactmodification/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -84,4 +84,4 @@
 
 type: SERVER_EVENT
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.clientconflict/index.html b/artifact_references/pages/server.internal.clientconflict/index.html
index 21962f09f82..21681501b51 100644
--- a/artifact_references/pages/server.internal.clientconflict/index.html
+++ b/artifact_references/pages/server.internal.clientconflict/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.ClientConflict :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.clientconflict/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.clientconflict/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -86,4 +86,4 @@
 
 type: INTERNAL
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.clientdelete/index.html b/artifact_references/pages/server.internal.clientdelete/index.html
index 1c51975e869..3d4d3148ec5 100644
--- a/artifact_references/pages/server.internal.clientdelete/index.html
+++ b/artifact_references/pages/server.internal.clientdelete/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.ClientDelete :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.clientdelete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.clientdelete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -82,4 +82,4 @@
   - name: Principal
     description: The principal who initiated the deletion.
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.clientinfo/index.html b/artifact_references/pages/server.internal.clientinfo/index.html
index 378a1baf3a9..d6a37daa10c 100644
--- a/artifact_references/pages/server.internal.clientinfo/index.html
+++ b/artifact_references/pages/server.internal.clientinfo/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.ClientInfo :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.clientinfo/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.clientinfo/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -79,4 +79,4 @@
   update the client info indexes. Client send this automatically at
   startup and then every day.
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.clientinfosnapshot/index.html b/artifact_references/pages/server.internal.clientinfosnapshot/index.html
index 7359b285eac..1fba8059944 100644
--- a/artifact_references/pages/server.internal.clientinfosnapshot/index.html
+++ b/artifact_references/pages/server.internal.clientinfosnapshot/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.ClientInfoSnapshot :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.clientinfosnapshot/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.clientinfosnapshot/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -79,4 +79,4 @@
   snapshot. Minion use this to trigger a refresh of their client info
   snapshots.
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.clientping/index.html b/artifact_references/pages/server.internal.clientping/index.html
index 0420e0617b5..d7169e5bd44 100644
--- a/artifact_references/pages/server.internal.clientping/index.html
+++ b/artifact_references/pages/server.internal.clientping/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.ClientPing :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.clientping/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.clientping/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -75,4 +75,4 @@
 description: |
   An internal event channel for notifying about client pings.
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.clienttasks/index.html b/artifact_references/pages/server.internal.clienttasks/index.html
index 2fb7c76a04e..8cd3fcdebe6 100644
--- a/artifact_references/pages/server.internal.clienttasks/index.html
+++ b/artifact_references/pages/server.internal.clienttasks/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.ClientTasks :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.clienttasks/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.clienttasks/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -78,4 +78,4 @@
 column_types:
   - name: ClientId
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.enrollment/index.html b/artifact_references/pages/server.internal.enrollment/index.html
index f8e59b24474..76c221a2d36 100644
--- a/artifact_references/pages/server.internal.enrollment/index.html
+++ b/artifact_references/pages/server.internal.enrollment/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.Enrollment :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.enrollment/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.enrollment/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -82,4 +82,4 @@
 
 type: INTERNAL
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.frontendmetrics/index.html b/artifact_references/pages/server.internal.frontendmetrics/index.html
index ed7890a3f78..13e792e11f6 100644
--- a/artifact_references/pages/server.internal.frontendmetrics/index.html
+++ b/artifact_references/pages/server.internal.frontendmetrics/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.FrontendMetrics :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.frontendmetrics/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.frontendmetrics/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -80,4 +80,4 @@
 
 type: INTERNAL
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.huntmodification/index.html b/artifact_references/pages/server.internal.huntmodification/index.html
index c8929d349b0..6b171d8a9d8 100644
--- a/artifact_references/pages/server.internal.huntmodification/index.html
+++ b/artifact_references/pages/server.internal.huntmodification/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.HuntModification :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.huntmodification/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.huntmodification/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -85,4 +85,4 @@
   - name: Mutation
     type: json
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.huntupdate/index.html b/artifact_references/pages/server.internal.huntupdate/index.html
index 01a6285059f..faa14166890 100644
--- a/artifact_references/pages/server.internal.huntupdate/index.html
+++ b/artifact_references/pages/server.internal.huntupdate/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.HuntUpdate :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.huntupdate/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.huntupdate/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -85,4 +85,4 @@
   - name: Hunt
     type: json
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.interrogate/index.html b/artifact_references/pages/server.internal.interrogate/index.html
index 9d02e9d98e3..9b957da53ae 100644
--- a/artifact_references/pages/server.internal.interrogate/index.html
+++ b/artifact_references/pages/server.internal.interrogate/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.Interrogate :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.interrogate/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.interrogate/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -128,4 +128,4 @@
             })
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.interrogation/index.html b/artifact_references/pages/server.internal.interrogation/index.html
index 190cd7f2fbf..20b8b64e43f 100644
--- a/artifact_references/pages/server.internal.interrogation/index.html
+++ b/artifact_references/pages/server.internal.interrogation/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.Interrogation :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.interrogation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.interrogation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -82,4 +82,4 @@
 
 type: INTERNAL
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.inventory/index.html b/artifact_references/pages/server.internal.inventory/index.html
index c79654427d2..cfa3cc7976b 100644
--- a/artifact_references/pages/server.internal.inventory/index.html
+++ b/artifact_references/pages/server.internal.inventory/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.Inventory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.inventory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.inventory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -76,4 +76,4 @@
 
 type: INTERNAL
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.label/index.html b/artifact_references/pages/server.internal.label/index.html
index 2592f237987..5194a145299 100644
--- a/artifact_references/pages/server.internal.label/index.html
+++ b/artifact_references/pages/server.internal.label/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.Label :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.label/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.label/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -76,4 +76,4 @@
 
 type: INTERNAL
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.masterregistrations/index.html b/artifact_references/pages/server.internal.masterregistrations/index.html
index b8848cc821b..f65cb9bddd8 100644
--- a/artifact_references/pages/server.internal.masterregistrations/index.html
+++ b/artifact_references/pages/server.internal.masterregistrations/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.MasterRegistrations :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.masterregistrations/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.masterregistrations/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -81,4 +81,4 @@
   - name: Events
     type: json_array
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.metadatamodifications/index.html b/artifact_references/pages/server.internal.metadatamodifications/index.html
index b2ca0a99dbf..d8600de9018 100644
--- a/artifact_references/pages/server.internal.metadatamodifications/index.html
+++ b/artifact_references/pages/server.internal.metadatamodifications/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.MetadataModifications :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.metadatamodifications/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.metadatamodifications/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -80,4 +80,4 @@
 
 type: SERVER_EVENT
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.notifications/index.html b/artifact_references/pages/server.internal.notifications/index.html
index 99515f4dcb2..3f7b113e1f9 100644
--- a/artifact_references/pages/server.internal.notifications/index.html
+++ b/artifact_references/pages/server.internal.notifications/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.Notifications :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.notifications/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.notifications/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -84,4 +84,4 @@
 
 type: INTERNAL
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.ping/index.html b/artifact_references/pages/server.internal.ping/index.html
index 521adfb8267..28d07c7ea08 100644
--- a/artifact_references/pages/server.internal.ping/index.html
+++ b/artifact_references/pages/server.internal.ping/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.Ping :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.ping/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.ping/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -84,4 +84,4 @@
   - name: ClientId
   - name: NotifyTarget
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.pong/index.html b/artifact_references/pages/server.internal.pong/index.html
index d9ddb74f5da..980061be77b 100644
--- a/artifact_references/pages/server.internal.pong/index.html
+++ b/artifact_references/pages/server.internal.pong/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.Pong :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.pong/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.pong/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -80,4 +80,4 @@
   - name: ClientId
   - name: Connected
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.tooldependencies/index.html b/artifact_references/pages/server.internal.tooldependencies/index.html
index 52fcf5394c2..9fbc27580bf 100644
--- a/artifact_references/pages/server.internal.tooldependencies/index.html
+++ b/artifact_references/pages/server.internal.tooldependencies/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.ToolDependencies :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.tooldependencies/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.tooldependencies/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -113,4 +113,4 @@
     serve_locally: true
     version: 0.7.0-2
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.internal.welcome/index.html b/artifact_references/pages/server.internal.welcome/index.html
index 5db8b2ce385..f88df7d8908 100644
--- a/artifact_references/pages/server.internal.welcome/index.html
+++ b/artifact_references/pages/server.internal.welcome/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Internal.Welcome :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.welcome/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.internal.welcome/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -120,4 +120,4 @@
 
       &lt;/div&gt;&lt;/div&gt;&lt;/div&gt;
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.monitor.clientconflict/index.html b/artifact_references/pages/server.monitor.clientconflict/index.html
index e9748bdfd83..4cfae21bfa8 100644
--- a/artifact_references/pages/server.monitor.clientconflict/index.html
+++ b/artifact_references/pages/server.monitor.clientconflict/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Monitor.ClientConflict :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.monitor.clientconflict/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.monitor.clientconflict/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -97,4 +97,4 @@
       AS NewCollection
       FROM watch_monitoring(artifact="Server.Internal.ClientConflict")
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.monitor.health/index.html b/artifact_references/pages/server.monitor.health/index.html
index 6f06533b7c1..4e80a97b3fd 100644
--- a/artifact_references/pages/server.monitor.health/index.html
+++ b/artifact_references/pages/server.monitor.health/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Monitor.Health :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.monitor.health/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.monitor.health/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -164,4 +164,4 @@
 
       {{ Query "SELECT Version FROM config" | Table }}
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.monitor.profile/index.html b/artifact_references/pages/server.monitor.profile/index.html
index 5e316f6d91a..f44872573fd 100644
--- a/artifact_references/pages/server.monitor.profile/index.html
+++ b/artifact_references/pages/server.monitor.profile/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Monitor.Profile :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.monitor.profile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.monitor.profile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -217,4 +217,4 @@
   - name: InUseBytes
     type: mb
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.monitor.shell/index.html b/artifact_references/pages/server.monitor.shell/index.html
index 883579975b7..28e891588ca 100644
--- a/artifact_references/pages/server.monitor.shell/index.html
+++ b/artifact_references/pages/server.monitor.shell/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Monitor.Shell :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.monitor.shell/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.monitor.shell/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -138,4 +138,4 @@
 
       {{end}}
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.monitor.velometrics/index.html b/artifact_references/pages/server.monitor.velometrics/index.html
index 16cb3bc1740..303473030f2 100644
--- a/artifact_references/pages/server.monitor.velometrics/index.html
+++ b/artifact_references/pages/server.monitor.velometrics/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Monitor.VeloMetrics :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.monitor.velometrics/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.monitor.velometrics/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -118,4 +118,4 @@
                      AS seven_day_active
         FROM stats
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.monitoring.clientcount/index.html b/artifact_references/pages/server.monitoring.clientcount/index.html
index e3031a6a9c6..05e711a0866 100644
--- a/artifact_references/pages/server.monitoring.clientcount/index.html
+++ b/artifact_references/pages/server.monitoring.clientcount/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Monitoring.ClientCount :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.monitoring.clientcount/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.monitoring.clientcount/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -112,4 +112,4 @@
             )
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.monitoring.schedulehunt/index.html b/artifact_references/pages/server.monitoring.schedulehunt/index.html
index c81b68bacbf..d655f0f7ac3 100644
--- a/artifact_references/pages/server.monitoring.schedulehunt/index.html
+++ b/artifact_references/pages/server.monitoring.schedulehunt/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Monitoring.ScheduleHunt :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.monitoring.schedulehunt/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.monitoring.schedulehunt/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -105,4 +105,4 @@
                   description=HuntDescription)
       FROM schedule
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.orgs.listorgs/index.html b/artifact_references/pages/server.orgs.listorgs/index.html
index 254048d32c8..29179f2f28c 100644
--- a/artifact_references/pages/server.orgs.listorgs/index.html
+++ b/artifact_references/pages/server.orgs.listorgs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Orgs.ListOrgs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.orgs.listorgs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.orgs.listorgs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -103,4 +103,4 @@
       SELECT * FROM orgs()
     })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.orgs.neworg/index.html b/artifact_references/pages/server.orgs.neworg/index.html
index 53080382975..a71b01e328f 100644
--- a/artifact_references/pages/server.orgs.neworg/index.html
+++ b/artifact_references/pages/server.orgs.neworg/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Orgs.NewOrg :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.orgs.neworg/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.orgs.neworg/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -105,4 +105,4 @@
                        user=whoami()) AS AdminUser
     FROM scope()
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.powershell.encodedcommand/index.html b/artifact_references/pages/server.powershell.encodedcommand/index.html
index 9804cec4498..d6c5440b453 100644
--- a/artifact_references/pages/server.powershell.encodedcommand/index.html
+++ b/artifact_references/pages/server.powershell.encodedcommand/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Powershell.EncodedCommand :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.powershell.encodedcommand/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.powershell.encodedcommand/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -106,4 +106,4 @@
 
       {{ Query "SELECT ClientId, { SELECT os_info.fqdn from clients(client_id=ClientId) } AS FQDN, Script FROM source()" | Table }}
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.slack.clients.online/index.html b/artifact_references/pages/server.slack.clients.online/index.html
index 8f7b9715a96..0002dc92b12 100644
--- a/artifact_references/pages/server.slack.clients.online/index.html
+++ b/artifact_references/pages/server.slack.clients.online/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Slack.Clients.Online :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.slack.clients.online/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.slack.clients.online/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -120,4 +120,4 @@
            row={SELECT * FROM clock(period=60)},
            query=send_massage)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.addtimeline/index.html b/artifact_references/pages/server.utils.addtimeline/index.html
index 4a989261a5a..c89f22f0e61 100644
--- a/artifact_references/pages/server.utils.addtimeline/index.html
+++ b/artifact_references/pages/server.utils.addtimeline/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.AddTimeline :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.addtimeline/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.addtimeline/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -106,4 +106,4 @@
          key=Key), RemoveLimit
       FROM scope()
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.adduser/index.html b/artifact_references/pages/server.utils.adduser/index.html
index 9f3d62ead1c..82b91b52b3a 100644
--- a/artifact_references/pages/server.utils.adduser/index.html
+++ b/artifact_references/pages/server.utils.adduser/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.AddUser :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.adduser/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.adduser/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -143,4 +143,4 @@
         WHERE log(message="A Username must be set") AND FALSE
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.backupdirectory/index.html b/artifact_references/pages/server.utils.backupdirectory/index.html
index 1d9689d8173..d3c7a4ddf4e 100644
--- a/artifact_references/pages/server.utils.backupdirectory/index.html
+++ b/artifact_references/pages/server.utils.backupdirectory/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.BackupDirectory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.backupdirectory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.backupdirectory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -114,4 +114,4 @@
         if(condition=RemoveDownloads,
            then=rm(filename=file_store(path=FlowDownload)))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.backupgcs/index.html b/artifact_references/pages/server.utils.backupgcs/index.html
index c318409a209..2d3229b8086 100644
--- a/artifact_references/pages/server.utils.backupgcs/index.html
+++ b/artifact_references/pages/server.utils.backupgcs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.BackupGCS :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.backupgcs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.backupgcs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -133,4 +133,4 @@
         if(condition=RemoveDownloads,
            then=rm(filename=file_store(path=FlowDownload)))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.backups3/index.html b/artifact_references/pages/server.utils.backups3/index.html
index 2ffaef22d65..fd035916550 100644
--- a/artifact_references/pages/server.utils.backups3/index.html
+++ b/artifact_references/pages/server.utils.backups3/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.BackupS3 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.backups3/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.backups3/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -137,4 +137,4 @@
         if(condition=RemoveDownloads,
            then=rm(filename=file_store(path=FlowDownload)))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.cancelhunt/index.html b/artifact_references/pages/server.utils.cancelhunt/index.html
index 285081850d0..2a217ec83fd 100644
--- a/artifact_references/pages/server.utils.cancelhunt/index.html
+++ b/artifact_references/pages/server.utils.cancelhunt/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.CancelHunt :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.cancelhunt/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.cancelhunt/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -103,4 +103,4 @@
          WHERE log(message="Hunt ID must be specified.") AND NULL
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.collectclient/index.html b/artifact_references/pages/server.utils.collectclient/index.html
index ae0de5182d1..69ffeb2b27b 100644
--- a/artifact_references/pages/server.utils.collectclient/index.html
+++ b/artifact_references/pages/server.utils.collectclient/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.CollectClient :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.collectclient/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.collectclient/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -122,4 +122,4 @@
            FROM source(client_id=client_id, flow_id=collection.flow_id, artifact=_value)
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.createcollector/index.html b/artifact_references/pages/server.utils.createcollector/index.html
index 5b268f2edc0..7c926afb38c 100644
--- a/artifact_references/pages/server.utils.createcollector/index.html
+++ b/artifact_references/pages/server.utils.createcollector/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.CreateCollector :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.createcollector/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.createcollector/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -573,4 +573,4 @@
            config=serialize(format='json', item=autoexec))
       FROM scope()
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.createmsi/index.html b/artifact_references/pages/server.utils.createmsi/index.html
index 26801581c4a..5661f335f4c 100644
--- a/artifact_references/pages/server.utils.createmsi/index.html
+++ b/artifact_references/pages/server.utils.createmsi/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.CreateMSI :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.createmsi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.createmsi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -97,4 +97,4 @@
        WHERE AlsoBuild_x86
     })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.deleteclient/index.html b/artifact_references/pages/server.utils.deleteclient/index.html
index 783bd188369..28007665e74 100644
--- a/artifact_references/pages/server.utils.deleteclient/index.html
+++ b/artifact_references/pages/server.utils.deleteclient/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.DeleteClient :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.deleteclient/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.deleteclient/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -107,4 +107,4 @@
             really_do_it=ReallyDoIt)
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.deleteevents/index.html b/artifact_references/pages/server.utils.deleteevents/index.html
index 9f870481fc2..0e98fe820b5 100644
--- a/artifact_references/pages/server.utils.deleteevents/index.html
+++ b/artifact_references/pages/server.utils.deleteevents/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.DeleteEvents :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.deleteevents/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.deleteevents/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -112,4 +112,4 @@
          start_time=StartTime, end_time=EndTime,
          really_do_it=ReallyDoIt)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.deletefavoriteflow/index.html b/artifact_references/pages/server.utils.deletefavoriteflow/index.html
index 917d3e51d63..51ea74b56ba 100644
--- a/artifact_references/pages/server.utils.deletefavoriteflow/index.html
+++ b/artifact_references/pages/server.utils.deletefavoriteflow/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.DeleteFavoriteFlow :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.deletefavoriteflow/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.deletefavoriteflow/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -94,4 +94,4 @@
       SELECT favorites_delete(name=Name, type=Type)
       FROM scope()
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.deleteflow/index.html b/artifact_references/pages/server.utils.deleteflow/index.html
index 3170d019f77..42a6cd11226 100644
--- a/artifact_references/pages/server.utils.deleteflow/index.html
+++ b/artifact_references/pages/server.utils.deleteflow/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.DeleteFlow :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.deleteflow/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.deleteflow/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -103,4 +103,4 @@
        SELECT Type, Data.VFSPath AS VFSPath, Error
        FROM delete_flow(flow_id=FlowId, client_id=ClientId, really_do_it=ReallyDoIt)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.deletemanyflows/index.html b/artifact_references/pages/server.utils.deletemanyflows/index.html
index 84cca67fded..5995f74fd30 100644
--- a/artifact_references/pages/server.utils.deletemanyflows/index.html
+++ b/artifact_references/pages/server.utils.deletemanyflows/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.DeleteManyFlows :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.deletemanyflows/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.deletemanyflows/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -142,4 +142,4 @@
             SELECT * FROM hits
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.deletemonitoringdata/index.html b/artifact_references/pages/server.utils.deletemonitoringdata/index.html
index c9d689ca413..75f3d03f35a 100644
--- a/artifact_references/pages/server.utils.deletemonitoringdata/index.html
+++ b/artifact_references/pages/server.utils.deletemonitoringdata/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.DeleteMonitoringData :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.deletemonitoringdata/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.deletemonitoringdata/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -125,4 +125,4 @@
               AND Timestamp &lt; DateBefore
         }, workers=10)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.deletenotebook/index.html b/artifact_references/pages/server.utils.deletenotebook/index.html
index 86ba86bde82..ef5adbb1bbd 100644
--- a/artifact_references/pages/server.utils.deletenotebook/index.html
+++ b/artifact_references/pages/server.utils.deletenotebook/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.DeleteNotebook :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.deletenotebook/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.deletenotebook/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -88,4 +88,4 @@
       SELECT * FROM notebook_delete(
           notebook_id=NotebookId, really_do_it=ReallyDoIt)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.importcollection/index.html b/artifact_references/pages/server.utils.importcollection/index.html
index 0941e80923a..adda90b86ec 100644
--- a/artifact_references/pages/server.utils.importcollection/index.html
+++ b/artifact_references/pages/server.utils.importcollection/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.ImportCollection :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.importcollection/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.importcollection/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -131,4 +131,4 @@
              Import.artifacts_with_results AS Artifacts
       FROM result
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.listusers/index.html b/artifact_references/pages/server.utils.listusers/index.html
index 6fa005aca1a..9c346e0db52 100644
--- a/artifact_references/pages/server.utils.listusers/index.html
+++ b/artifact_references/pages/server.utils.listusers/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.ListUsers :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.listusers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.listusers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -88,4 +88,4 @@
   - query: |
       SELECT * FROM gui_users(all_orgs=TRUE)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.reindex/index.html b/artifact_references/pages/server.utils.reindex/index.html
index 09c47e0267d..f4f7118bc85 100644
--- a/artifact_references/pages/server.utils.reindex/index.html
+++ b/artifact_references/pages/server.utils.reindex/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.ReIndex :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.reindex/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.reindex/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -96,4 +96,4 @@
         LIMIT 1
       }, workers=10)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/server.utils.savefavoriteflow/index.html b/artifact_references/pages/server.utils.savefavoriteflow/index.html
index ff8d9db1b48..b58128a0d85 100644
--- a/artifact_references/pages/server.utils.savefavoriteflow/index.html
+++ b/artifact_references/pages/server.utils.savefavoriteflow/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.SaveFavoriteFlow :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.savefavoriteflow/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/server.utils.savefavoriteflow/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -109,4 +109,4 @@
          type=Type)
       FROM scope()
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/splunk.flows.upload/index.html b/artifact_references/pages/splunk.flows.upload/index.html
index 547d3073ca7..29b8824ba54 100644
--- a/artifact_references/pages/splunk.flows.upload/index.html
+++ b/artifact_references/pages/splunk.flows.upload/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Splunk.Flows.Upload :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/splunk.flows.upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/splunk.flows.upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -221,4 +221,4 @@
         timestamp_field=TimestampField
         )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/system.flow.archive/index.html b/artifact_references/pages/system.flow.archive/index.html
index 4e493f6ccad..c9c34bb5314 100644
--- a/artifact_references/pages/system.flow.archive/index.html
+++ b/artifact_references/pages/system.flow.archive/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>System.Flow.Archive :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/system.flow.archive/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/system.flow.archive/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -78,4 +78,4 @@
 
 type: CLIENT_EVENT
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/system.flow.completion/index.html b/artifact_references/pages/system.flow.completion/index.html
index 469655908c8..87755afd39f 100644
--- a/artifact_references/pages/system.flow.completion/index.html
+++ b/artifact_references/pages/system.flow.completion/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>System.Flow.Completion :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/system.flow.completion/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/system.flow.completion/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -78,4 +78,4 @@
 
 type: CLIENT_EVENT
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/system.hunt.archive/index.html b/artifact_references/pages/system.hunt.archive/index.html
index 624ac5c46fc..a9dcc60019f 100644
--- a/artifact_references/pages/system.hunt.archive/index.html
+++ b/artifact_references/pages/system.hunt.archive/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>System.Hunt.Archive :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/system.hunt.archive/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/system.hunt.archive/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -80,4 +80,4 @@
 
 type: CLIENT_EVENT
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/system.hunt.creation/index.html b/artifact_references/pages/system.hunt.creation/index.html
index 2f090469019..c5f7e803d72 100644
--- a/artifact_references/pages/system.hunt.creation/index.html
+++ b/artifact_references/pages/system.hunt.creation/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>System.Hunt.Creation :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/system.hunt.creation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/system.hunt.creation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -76,4 +76,4 @@
 
 type: SERVER_EVENT
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/system.hunt.participation/index.html b/artifact_references/pages/system.hunt.participation/index.html
index 14c0c5f8576..d11ceecf0d1 100644
--- a/artifact_references/pages/system.hunt.participation/index.html
+++ b/artifact_references/pages/system.hunt.participation/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>System.Hunt.Participation :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/system.hunt.participation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/system.hunt.participation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -79,4 +79,4 @@
 # Will not be written but will be relayed between minions and server.
 type: INTERNAL
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/system.upload.completion/index.html b/artifact_references/pages/system.upload.completion/index.html
index 79524e47d34..c9b6fdf9d38 100644
--- a/artifact_references/pages/system.upload.completion/index.html
+++ b/artifact_references/pages/system.upload.completion/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>System.Upload.Completion :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/system.upload.completion/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/system.upload.completion/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -78,4 +78,4 @@
 
 type: CLIENT_EVENT
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/system.vfs.downloadfile/index.html b/artifact_references/pages/system.vfs.downloadfile/index.html
index 18740a5dd06..700953c5c52 100644
--- a/artifact_references/pages/system.vfs.downloadfile/index.html
+++ b/artifact_references/pages/system.vfs.downloadfile/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>System.VFS.DownloadFile :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/system.vfs.downloadfile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/system.vfs.downloadfile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -141,4 +141,4 @@
         then={ SELECT * FROM download_recursive},
         else={ SELECT * FROM download_one_file})
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/system.vfs.listdirectory/index.html b/artifact_references/pages/system.vfs.listdirectory/index.html
index 6cb1347f4ef..db4560b3c6a 100644
--- a/artifact_references/pages/system.vfs.listdirectory/index.html
+++ b/artifact_references/pages/system.vfs.listdirectory/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>System.VFS.ListDirectory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/system.vfs.listdirectory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/system.vfs.listdirectory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -174,4 +174,4 @@
        then=NewQuery,
        else=LegacyQuery)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/triage.collection.upload/index.html b/artifact_references/pages/triage.collection.upload/index.html
index 01b33d79bdf..5a7c0cd94a8 100644
--- a/artifact_references/pages/triage.collection.upload/index.html
+++ b/artifact_references/pages/triage.collection.upload/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Triage.Collection.Upload :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/triage.collection.upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/triage.collection.upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -100,4 +100,4 @@
                FileDetails.Sha256 as SHA256
         FROM results
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/triage.collection.uploadtable/index.html b/artifact_references/pages/triage.collection.uploadtable/index.html
index 3dddab2f8cb..f59bd34edd1 100644
--- a/artifact_references/pages/triage.collection.uploadtable/index.html
+++ b/artifact_references/pages/triage.collection.uploadtable/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Triage.Collection.UploadTable :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/triage.collection.uploadtable/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/triage.collection.uploadtable/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -105,4 +105,4 @@
           FROM results
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.activedirectory.bloodhound/index.html b/artifact_references/pages/windows.activedirectory.bloodhound/index.html
index 6a58d852e6f..d4d3f85c8c0 100644
--- a/artifact_references/pages/windows.activedirectory.bloodhound/index.html
+++ b/artifact_references/pages/windows.activedirectory.bloodhound/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.ActiveDirectory.BloodHound :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.activedirectory.bloodhound/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.activedirectory.bloodhound/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -133,4 +133,4 @@
         },
         else=deploy)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.analysis.evidenceofdownload/index.html b/artifact_references/pages/windows.analysis.evidenceofdownload/index.html
index 42bd096976d..61908eead9d 100644
--- a/artifact_references/pages/windows.analysis.evidenceofdownload/index.html
+++ b/artifact_references/pages/windows.analysis.evidenceofdownload/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Analysis.EvidenceOfDownload :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.analysis.evidenceofdownload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.analysis.evidenceofdownload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -128,4 +128,4 @@
              parse_string_with_regex(regex="ReferrerUrl=(.+)", string=_ZoneIdentifierContent).g1 AS ReferrerUrl
       FROM X
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.analysis.evidenceofexecution/index.html b/artifact_references/pages/windows.analysis.evidenceofexecution/index.html
index 44260d01f0b..4af3f059c80 100644
--- a/artifact_references/pages/windows.analysis.evidenceofexecution/index.html
+++ b/artifact_references/pages/windows.analysis.evidenceofexecution/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Analysis.EvidenceOfExecution :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.analysis.evidenceofexecution/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.analysis.evidenceofexecution/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -105,4 +105,4 @@
     query: |
       SELECT * FROM Artifact.Windows.Forensics.RecentApps()
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.application.firefox.downloads/index.html b/artifact_references/pages/windows.application.firefox.downloads/index.html
index b503aed56be..04eb689d0cc 100644
--- a/artifact_references/pages/windows.application.firefox.downloads/index.html
+++ b/artifact_references/pages/windows.application.firefox.downloads/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Application.Firefox.Downloads :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.application.firefox.downloads/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.application.firefox.downloads/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -138,4 +138,4 @@
             ORDER BY last_modified DESC
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.applications.chocolateypackages/index.html b/artifact_references/pages/windows.applications.chocolateypackages/index.html
index f5e98431b8d..f6443f82798 100644
--- a/artifact_references/pages/windows.applications.chocolateypackages/index.html
+++ b/artifact_references/pages/windows.applications.chocolateypackages/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.ChocolateyPackages :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.chocolateypackages/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.chocolateypackages/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -107,4 +107,4 @@
             FROM files
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.applications.chrome.cookies/index.html b/artifact_references/pages/windows.applications.chrome.cookies/index.html
index 25597aedef8..d6b09124970 100644
--- a/artifact_references/pages/windows.applications.chrome.cookies/index.html
+++ b/artifact_references/pages/windows.applications.chrome.cookies/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.Chrome.Cookies :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.chrome.cookies/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.chrome.cookies/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -134,4 +134,4 @@
               query=cookieSQLQuery)
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.applications.chrome.extensions/index.html b/artifact_references/pages/windows.applications.chrome.extensions/index.html
index c20025cdfaa..5af911fc99d 100644
--- a/artifact_references/pages/windows.applications.chrome.extensions/index.html
+++ b/artifact_references/pages/windows.applications.chrome.extensions/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.Chrome.Extensions :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.chrome.extensions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.chrome.extensions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -213,4 +213,4 @@
 
         FROM parsed_manifest_files
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.applications.chrome.history/index.html b/artifact_references/pages/windows.applications.chrome.history/index.html
index d887263e135..8d630a4ed76 100644
--- a/artifact_references/pages/windows.applications.chrome.history/index.html
+++ b/artifact_references/pages/windows.applications.chrome.history/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.Chrome.History :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.chrome.history/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.chrome.history/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -165,4 +165,4 @@
           })
           WHERE visited_url =~ URLRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.applications.edge.favicons/index.html b/artifact_references/pages/windows.applications.edge.favicons/index.html
index 597b0e3036c..8250e3b8abe 100644
--- a/artifact_references/pages/windows.applications.edge.favicons/index.html
+++ b/artifact_references/pages/windows.applications.edge.favicons/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.Edge.Favicons :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.edge.favicons/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.edge.favicons/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -150,4 +150,4 @@
 - name: Image
   type: preview_upload
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.applications.edge.history/index.html b/artifact_references/pages/windows.applications.edge.history/index.html
index 55b6d7b1e62..889e3cfe860 100644
--- a/artifact_references/pages/windows.applications.edge.history/index.html
+++ b/artifact_references/pages/windows.applications.edge.history/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.Edge.History :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.edge.history/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.edge.history/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -96,4 +96,4 @@
          historyGlobs=historyGlobs, urlSQLQuery=urlSQLQuery,
          userRegex=userRegex)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.applications.firefox.downloads/index.html b/artifact_references/pages/windows.applications.firefox.downloads/index.html
index 16e0a66858a..8bb53fcc485 100644
--- a/artifact_references/pages/windows.applications.firefox.downloads/index.html
+++ b/artifact_references/pages/windows.applications.firefox.downloads/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.Firefox.Downloads :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.firefox.downloads/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.firefox.downloads/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -153,4 +153,4 @@
           })
           WHERE url =~ URLRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.applications.firefox.history/index.html b/artifact_references/pages/windows.applications.firefox.history/index.html
index 4ee49300e4d..bf176d922d0 100644
--- a/artifact_references/pages/windows.applications.firefox.history/index.html
+++ b/artifact_references/pages/windows.applications.firefox.history/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.Firefox.History :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.firefox.history/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.firefox.history/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -122,4 +122,4 @@
           })
           WHERE url_visited =~ URLRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.applications.iislogs/index.html b/artifact_references/pages/windows.applications.iislogs/index.html
index 2a560eaaa9f..5cf34cb036c 100644
--- a/artifact_references/pages/windows.applications.iislogs/index.html
+++ b/artifact_references/pages/windows.applications.iislogs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.IISLogs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.iislogs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.iislogs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -129,4 +129,4 @@
             SELECT * FROM foreach(row=parsed,
                   query={ SELECT *, Fqdn, _Raw FROM GrokParsed })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.applications.megasync/index.html b/artifact_references/pages/windows.applications.megasync/index.html
index 6d292eacde5..527909f7d89 100644
--- a/artifact_references/pages/windows.applications.megasync/index.html
+++ b/artifact_references/pages/windows.applications.megasync/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.MegaSync :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.megasync/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.megasync/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -159,4 +159,4 @@
         FROM output
         GROUP BY OSPath
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.applications.nirsoftbrowserviewer/index.html b/artifact_references/pages/windows.applications.nirsoftbrowserviewer/index.html
index 0cb70dac321..fd4e01650b3 100644
--- a/artifact_references/pages/windows.applications.nirsoftbrowserviewer/index.html
+++ b/artifact_references/pages/windows.applications.nirsoftbrowserviewer/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.NirsoftBrowserViewer :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.nirsoftbrowserviewer/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.nirsoftbrowserviewer/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -161,4 +161,4 @@
             Visited &gt; DateAfterTime AND
             Visited &lt; DateBeforeTime
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.applications.officemacros/index.html b/artifact_references/pages/windows.applications.officemacros/index.html
index 75098ff6e5a..18c9516bf8a 100644
--- a/artifact_references/pages/windows.applications.officemacros/index.html
+++ b/artifact_references/pages/windows.applications.officemacros/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.OfficeMacros :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.officemacros/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.officemacros/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -103,4 +103,4 @@
                SELECT * from olevba(file=OSPath)
            })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.applications.sbecmd/index.html b/artifact_references/pages/windows.applications.sbecmd/index.html
index 8865cd2f715..db8152d3dbd 100644
--- a/artifact_references/pages/windows.applications.sbecmd/index.html
+++ b/artifact_references/pages/windows.applications.sbecmd/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.SBECmd :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.sbecmd/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.sbecmd/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -181,4 +181,4 @@
       })
       WHERE Stdout =~ "SBECmd"
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.applications.teamviewer.incoming/index.html b/artifact_references/pages/windows.applications.teamviewer.incoming/index.html
index ac7a50dd2c4..e07d18f665d 100644
--- a/artifact_references/pages/windows.applications.teamviewer.incoming/index.html
+++ b/artifact_references/pages/windows.applications.teamviewer.incoming/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.TeamViewer.Incoming :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.teamviewer.incoming/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.applications.teamviewer.incoming/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -174,4 +174,4 @@
         OSPath
       FROM logsearch(PathList=fspaths)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.attack.parentprocess/index.html b/artifact_references/pages/windows.attack.parentprocess/index.html
index 0e37bfadcf2..5dafbc422f3 100644
--- a/artifact_references/pages/windows.attack.parentprocess/index.html
+++ b/artifact_references/pages/windows.attack.parentprocess/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Attack.ParentProcess :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.attack.parentprocess/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.attack.parentprocess/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -132,4 +132,4 @@
              AND NOT ActualParentName =~ ParentRegex
          })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.attack.prefetch/index.html b/artifact_references/pages/windows.attack.prefetch/index.html
index 1f382da7f04..1953f578781 100644
--- a/artifact_references/pages/windows.attack.prefetch/index.html
+++ b/artifact_references/pages/windows.attack.prefetch/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Attack.Prefetch :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.attack.prefetch/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.attack.prefetch/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -155,4 +155,4 @@
 
       {{ Query "SELECT modified * 1000, Name FROM foreach(row=lookup, query={ SELECT * FROM data WHERE Name =~ signature})" | Timeline }}
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.attack.unexpectedimagepath/index.html b/artifact_references/pages/windows.attack.unexpectedimagepath/index.html
index a42a8c903de..6fcdb814945 100644
--- a/artifact_references/pages/windows.attack.unexpectedimagepath/index.html
+++ b/artifact_references/pages/windows.attack.unexpectedimagepath/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Attack.UnexpectedImagePath :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.attack.unexpectedimagepath/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.attack.unexpectedimagepath/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -147,4 +147,4 @@
         } AS SubProcesses
         FROM suspicious_processes
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.carving.cobaltstrike/index.html b/artifact_references/pages/windows.carving.cobaltstrike/index.html
index 40e5e38fe74..6de9ca0ba19 100644
--- a/artifact_references/pages/windows.carving.cobaltstrike/index.html
+++ b/artifact_references/pages/windows.carving.cobaltstrike/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Carving.CobaltStrike :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.carving.cobaltstrike/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.carving.cobaltstrike/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -792,4 +792,4 @@
   - name: DecodedData
     type: preview_upload
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.carving.usn/index.html b/artifact_references/pages/windows.carving.usn/index.html
index 59d669bd890..2a12b9d83a6 100644
--- a/artifact_references/pages/windows.carving.usn/index.html
+++ b/artifact_references/pages/windows.carving.usn/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Carving.USN :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.carving.usn/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.carving.usn/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -272,4 +272,4 @@
                ParentMFTId, Reason
         FROM FlatHits
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.carving.usnfiles/index.html b/artifact_references/pages/windows.carving.usnfiles/index.html
index 86946c4ab80..b316d273d67 100644
--- a/artifact_references/pages/windows.carving.usnfiles/index.html
+++ b/artifact_references/pages/windows.carving.usnfiles/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Carving.USNFiles :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.carving.usnfiles/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.carving.usnfiles/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -160,4 +160,4 @@
               TimeStamp &lt; DateBeforeTime AND
               TimeStamp &gt; DateAfterTime
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.collectors.file/index.html b/artifact_references/pages/windows.collectors.file/index.html
index 4305a9ff326..b5db38ae54e 100644
--- a/artifact_references/pages/windows.collectors.file/index.html
+++ b/artifact_references/pages/windows.collectors.file/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Collectors.File :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.collectors.file/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.collectors.file/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -107,4 +107,4 @@
           collectionSpec=collectionSpec, Root=Root, Separator=Separator)
           WHERE log(message=&quot;Using Windows.Collectors.File is deprecated. Use Generic.Collectors.File instead.&quot;)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.collectors.vss/index.html b/artifact_references/pages/windows.collectors.vss/index.html
index 04aff29e64e..dca5aea16c8 100644
--- a/artifact_references/pages/windows.collectors.vss/index.html
+++ b/artifact_references/pages/windows.collectors.vss/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Collectors.VSS :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.collectors.vss/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.collectors.vss/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -185,4 +185,4 @@
                Created, Modified, LastAccessed, MFT
       FROM uploaded_files
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.amcache/index.html b/artifact_references/pages/windows.detection.amcache/index.html
index 0b5c4cdb153..cb9d63c11ef 100644
--- a/artifact_references/pages/windows.detection.amcache/index.html
+++ b/artifact_references/pages/windows.detection.amcache/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.Amcache :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.amcache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.amcache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -194,4 +194,4 @@
                             then= EntryPath =~ PathRegex,
                             else= True)
             })
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.binaryhunter/index.html b/artifact_references/pages/windows.detection.binaryhunter/index.html
index 7af53d8fca1..9c4e2eaee23 100644
--- a/artifact_references/pages/windows.detection.binaryhunter/index.html
+++ b/artifact_references/pages/windows.detection.binaryhunter/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.BinaryHunter :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.binaryhunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.binaryhunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -222,4 +222,4 @@
                         then= Hash.SHA256 in SHA256Array)
             ), else = True )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.binaryrename/index.html b/artifact_references/pages/windows.detection.binaryrename/index.html
index c994cc7c633..6663f4d3cd0 100644
--- a/artifact_references/pages/windows.detection.binaryrename/index.html
+++ b/artifact_references/pages/windows.detection.binaryrename/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.BinaryRename :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.binaryrename/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.binaryrename/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -207,4 +207,4 @@
             AND NOT VersionInformation.OriginalFilename =~ '^(osk|SR|Narrator|ScreenMagnifier|DisplaySwitch)\.exe$'
         )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.cryptneturlcache/index.html b/artifact_references/pages/windows.detection.cryptneturlcache/index.html
index 79f5d536ac8..2f08720838e 100644
--- a/artifact_references/pages/windows.detection.cryptneturlcache/index.html
+++ b/artifact_references/pages/windows.detection.cryptneturlcache/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.CryptnetUrlCache :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.cryptneturlcache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.cryptneturlcache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -216,4 +216,4 @@
                             sep='CryptnetUrlCache')[0]
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.environmentvariables/index.html b/artifact_references/pages/windows.detection.environmentvariables/index.html
index ee5b3e65656..698e12ef3e4 100644
--- a/artifact_references/pages/windows.detection.environmentvariables/index.html
+++ b/artifact_references/pages/windows.detection.environmentvariables/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.EnvironmentVariables :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.environmentvariables/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.environmentvariables/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -159,4 +159,4 @@
           SELECT * FROM source()
           LIMIT 50
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.forwardedimports/index.html b/artifact_references/pages/windows.detection.forwardedimports/index.html
index 083aa92e404..11673197012 100644
--- a/artifact_references/pages/windows.detection.forwardedimports/index.html
+++ b/artifact_references/pages/windows.detection.forwardedimports/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.ForwardedImports :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.forwardedimports/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.forwardedimports/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -137,4 +137,4 @@
           WHERE ExportDLLName = DLLBareName
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.impersonation/index.html b/artifact_references/pages/windows.detection.impersonation/index.html
index d825c46c655..d139eb7d3fb 100644
--- a/artifact_references/pages/windows.detection.impersonation/index.html
+++ b/artifact_references/pages/windows.detection.impersonation/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.Impersonation :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.impersonation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.impersonation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -158,4 +158,4 @@
              WHERE ImpersonationToken.User AND ImpersonationToken.User != OwnerSid
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.mutants/index.html b/artifact_references/pages/windows.detection.mutants/index.html
index 13a5ddcfebc..748a8c2259a 100644
--- a/artifact_references/pages/windows.detection.mutants/index.html
+++ b/artifact_references/pages/windows.detection.mutants/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.Mutants :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.mutants/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.mutants/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -116,4 +116,4 @@
                 then= NOT Name =~ MutantWhitelistRegex,
                 else= True )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.processcreation/index.html b/artifact_references/pages/windows.detection.processcreation/index.html
index 37d3cd94bb1..630c7ad6e0f 100644
--- a/artifact_references/pages/windows.detection.processcreation/index.html
+++ b/artifact_references/pages/windows.detection.processcreation/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.ProcessCreation :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.processcreation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.processcreation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -147,4 +147,4 @@
         EventData.Description =~ DescriptionRegex AND
         EventData.FileVersion =~ FileVersionRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.psexecservice.kill/index.html b/artifact_references/pages/windows.detection.psexecservice.kill/index.html
index 4080a040726..47f592ed04f 100644
--- a/artifact_references/pages/windows.detection.psexecservice.kill/index.html
+++ b/artifact_references/pages/windows.detection.psexecservice.kill/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.PsexecService.Kill :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.psexecservice.kill/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.psexecservice.kill/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -105,4 +105,4 @@
                argv=["taskkill", "/PID", PID, "/T", "/F"])
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.psexecservice/index.html b/artifact_references/pages/windows.detection.psexecservice/index.html
index dd719845ad7..a053a7ec92d 100644
--- a/artifact_references/pages/windows.detection.psexecservice/index.html
+++ b/artifact_references/pages/windows.detection.psexecservice/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.PsexecService :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.psexecservice/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.psexecservice/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -130,4 +130,4 @@
           row=service_creation,
           query=file_scan)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.registry/index.html b/artifact_references/pages/windows.detection.registry/index.html
index 2d66ed6852c..e4a4c31284e 100644
--- a/artifact_references/pages/windows.detection.registry/index.html
+++ b/artifact_references/pages/windows.detection.registry/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.Registry :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.registry/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.registry/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -134,4 +134,4 @@
                         then= Certinfo.Trusted = 'trusted',
                         else= False )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.service.upload/index.html b/artifact_references/pages/windows.detection.service.upload/index.html
index 3d01d45109f..25a2f437c88 100644
--- a/artifact_references/pages/windows.detection.service.upload/index.html
+++ b/artifact_references/pages/windows.detection.service.upload/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.Service.Upload :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.service.upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.service.upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -90,4 +90,4 @@
                Timestamp, _EventData, _System
       FROM Artifact.Windows.Events.ServiceCreation()
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.templateinjection/index.html b/artifact_references/pages/windows.detection.templateinjection/index.html
index 026eeb1b350..5c362c5237d 100644
--- a/artifact_references/pages/windows.detection.templateinjection/index.html
+++ b/artifact_references/pages/windows.detection.templateinjection/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.TemplateInjection :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.templateinjection/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.templateinjection/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -254,4 +254,4 @@
             then= { SELECT * FROM upload_hits},
             else= { SELECT * FROM hits})
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.thumbdrives.list/index.html b/artifact_references/pages/windows.detection.thumbdrives.list/index.html
index de286b97d44..8f38be9800d 100644
--- a/artifact_references/pages/windows.detection.thumbdrives.list/index.html
+++ b/artifact_references/pages/windows.detection.thumbdrives.list/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.Thumbdrives.List :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.thumbdrives.list/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.thumbdrives.list/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -124,4 +124,4 @@
           period=10)
           WHERE Diff = "added"
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.thumbdrives.officekeywords/index.html b/artifact_references/pages/windows.detection.thumbdrives.officekeywords/index.html
index 8eddb73ac77..2a1e197a430 100644
--- a/artifact_references/pages/windows.detection.thumbdrives.officekeywords/index.html
+++ b/artifact_references/pages/windows.detection.thumbdrives.officekeywords/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.Thumbdrives.OfficeKeywords :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.thumbdrives.officekeywords/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.thumbdrives.officekeywords/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -122,4 +122,4 @@
               yaraRule=yaraRule, searchGlob=OSPath, documentGlobs="")
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.thumbdrives.officemacros/index.html b/artifact_references/pages/windows.detection.thumbdrives.officemacros/index.html
index cad10aff13d..7c3d1c5e9b4 100644
--- a/artifact_references/pages/windows.detection.thumbdrives.officemacros/index.html
+++ b/artifact_references/pages/windows.detection.thumbdrives.officemacros/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.Thumbdrives.OfficeMacros :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.thumbdrives.officemacros/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.thumbdrives.officemacros/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -106,4 +106,4 @@
             SELECT * from olevba(file=OSPath)
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.usn/index.html b/artifact_references/pages/windows.detection.usn/index.html
index 7bcf5ce1b3c..ffcbd0afbb4 100644
--- a/artifact_references/pages/windows.detection.usn/index.html
+++ b/artifact_references/pages/windows.detection.usn/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.Usn :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.usn/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.usn/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -118,4 +118,4 @@
       SELECT * FROM watch_usn(device=Device)
       WHERE OSPath =~ PathRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.wmiprocesscreation/index.html b/artifact_references/pages/windows.detection.wmiprocesscreation/index.html
index dcb8f885d81..acccbc0062f 100644
--- a/artifact_references/pages/windows.detection.wmiprocesscreation/index.html
+++ b/artifact_references/pages/windows.detection.wmiprocesscreation/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.WMIProcessCreation :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.wmiprocesscreation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.wmiprocesscreation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -94,4 +94,4 @@
           namespace="ROOT/CIMV2",
           wait=50000000)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.yara.device/index.html b/artifact_references/pages/windows.detection.yara.device/index.html
index 0e33c101844..9443cf45b84 100644
--- a/artifact_references/pages/windows.detection.yara.device/index.html
+++ b/artifact_references/pages/windows.detection.yara.device/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.Yara.Device :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.yara.device/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.yara.device/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -166,4 +166,4 @@
   - name: HitContext
     type: upload_preview
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.yara.ntfs/index.html b/artifact_references/pages/windows.detection.yara.ntfs/index.html
index 8339f669c18..7684bf42d91 100644
--- a/artifact_references/pages/windows.detection.yara.ntfs/index.html
+++ b/artifact_references/pages/windows.detection.yara.ntfs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.Yara.NTFS :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.yara.ntfs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.yara.ntfs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -229,4 +229,4 @@
 column_types:
   - name: HitContext
     type: preview_upload
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.yara.physicalmemory/index.html b/artifact_references/pages/windows.detection.yara.physicalmemory/index.html
index 8fa271686e3..0271a25da6b 100644
--- a/artifact_references/pages/windows.detection.yara.physicalmemory/index.html
+++ b/artifact_references/pages/windows.detection.yara.physicalmemory/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.Yara.PhysicalMemory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.yara.physicalmemory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.yara.physicalmemory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -188,4 +188,4 @@
       FROM yara(files=SparsePath, accessor='sparse',
                 rules=yara_rules, context=ContextBytes, number=NumberOfHits)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.detection.yara.process/index.html b/artifact_references/pages/windows.detection.yara.process/index.html
index 0582b261d74..2d4b162ee6a 100644
--- a/artifact_references/pages/windows.detection.yara.process/index.html
+++ b/artifact_references/pages/windows.detection.yara.process/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.Yara.Process :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.yara.process/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.detection.yara.process/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -241,4 +241,4 @@
   - name: HitContext
     type: preview_upload
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.etw.dns/index.html b/artifact_references/pages/windows.etw.dns/index.html
index 467f6131ebf..05b013b3860 100644
--- a/artifact_references/pages/windows.etw.dns/index.html
+++ b/artifact_references/pages/windows.etw.dns/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.ETW.DNS :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.etw.dns/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.etw.dns/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -212,4 +212,4 @@
             AND Process.ImageName =~ ImageRegex
             AND Query =~ QueryRegex
             AND Answer =~ AnswerRegex
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.etw.dnsqueriesserver/index.html b/artifact_references/pages/windows.etw.dnsqueriesserver/index.html
index f3a8b46f457..3b8cc768a93 100644
--- a/artifact_references/pages/windows.etw.dnsqueriesserver/index.html
+++ b/artifact_references/pages/windows.etw.dnsqueriesserver/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.ETW.DNSQueriesServer :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.etw.dnsqueriesserver/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.etw.dnsqueriesserver/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -108,4 +108,4 @@
               QNAME =~ QueryNameRegex AND
               Source =~ SourceIPRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.etw.edgeurls/index.html b/artifact_references/pages/windows.etw.edgeurls/index.html
index 994bd80753d..10c579621d2 100644
--- a/artifact_references/pages/windows.etw.edgeurls/index.html
+++ b/artifact_references/pages/windows.etw.edgeurls/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.ETW.EdgeURLs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.etw.edgeurls/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.etw.edgeurls/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -105,4 +105,4 @@
       FROM watch_etw(guid="{245F975D-909D-49ED-B8F9-9A75691D6B6B}")
       WHERE ID = 805 AND URL =~ URLFilter
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.etw.etwsessions/index.html b/artifact_references/pages/windows.etw.etwsessions/index.html
index 876d75f2175..a0289f9b8a4 100644
--- a/artifact_references/pages/windows.etw.etwsessions/index.html
+++ b/artifact_references/pages/windows.etw.etwsessions/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.ETW.ETWSessions :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.etw.etwsessions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.etw.etwsessions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -105,4 +105,4 @@
       FROM watch_etw(guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}", all=0x400)
       WHERE System.ID IN (14, 15)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.etw.filecreation/index.html b/artifact_references/pages/windows.etw.filecreation/index.html
index 6fc78ff9c28..127c7e3bdfd 100644
--- a/artifact_references/pages/windows.etw.filecreation/index.html
+++ b/artifact_references/pages/windows.etw.filecreation/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.ETW.FileCreation :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.etw.filecreation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.etw.filecreation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -126,4 +126,4 @@
         WHERE ProcessName =~ ProcessNameFilter
           AND ProcessExecutable =~ ProcessExecutableFilter
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.etw.registry/index.html b/artifact_references/pages/windows.etw.registry/index.html
index e55fe40fea0..fab4aed9d30 100644
--- a/artifact_references/pages/windows.etw.registry/index.html
+++ b/artifact_references/pages/windows.etw.registry/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.ETW.Registry :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.etw.registry/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.etw.registry/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -147,4 +147,4 @@
     FROM hits
     WHERE ProcessName =~ ProcessRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.etw.viewsessions/index.html b/artifact_references/pages/windows.etw.viewsessions/index.html
index eada1cf3cc0..36cebc3def2 100644
--- a/artifact_references/pages/windows.etw.viewsessions/index.html
+++ b/artifact_references/pages/windows.etw.viewsessions/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.ETW.ViewSessions :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.etw.viewsessions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.etw.viewsessions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -102,4 +102,4 @@
          })
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.etw.wmiprocesscreate/index.html b/artifact_references/pages/windows.etw.wmiprocesscreate/index.html
index 1f7d363c9ee..9e90e8b4999 100644
--- a/artifact_references/pages/windows.etw.wmiprocesscreate/index.html
+++ b/artifact_references/pages/windows.etw.wmiprocesscreate/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.ETW.WMIProcessCreate :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.etw.wmiprocesscreate/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.etw.wmiprocesscreate/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -112,4 +112,4 @@
              EventData.User AS User
       FROM hits
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.eventlogs.alternatelogon/index.html b/artifact_references/pages/windows.eventlogs.alternatelogon/index.html
index baa385b7d1f..8e848c0f1fd 100644
--- a/artifact_references/pages/windows.eventlogs.alternatelogon/index.html
+++ b/artifact_references/pages/windows.eventlogs.alternatelogon/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.AlternateLogon :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.alternatelogon/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.alternatelogon/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -103,4 +103,4 @@
       WHERE System.EventID.Value = 4648
         AND EventData
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.eventlogs.cleared/index.html b/artifact_references/pages/windows.eventlogs.cleared/index.html
index a4352d1edee..f57177aa811 100644
--- a/artifact_references/pages/windows.eventlogs.cleared/index.html
+++ b/artifact_references/pages/windows.eventlogs.cleared/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.Cleared :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.cleared/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.cleared/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -127,4 +127,4 @@
             DateBefore=DateBefore,
             VSSAnalysisAge=VSSAnalysisAge)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.eventlogs.dhcp/index.html b/artifact_references/pages/windows.eventlogs.dhcp/index.html
index 3cd0b6bb833..62cb0c448bd 100644
--- a/artifact_references/pages/windows.eventlogs.dhcp/index.html
+++ b/artifact_references/pages/windows.eventlogs.dhcp/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.DHCP :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.dhcp/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.dhcp/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -211,4 +211,4 @@
 
       {{ Query "SELECT _Time * 1000, ClientIP FROM source(source='RejectedDHCP')" | Timeline }}
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.eventlogs.evtx/index.html b/artifact_references/pages/windows.eventlogs.evtx/index.html
index c07fc47a8c2..6bfafa6a027 100644
--- a/artifact_references/pages/windows.eventlogs.evtx/index.html
+++ b/artifact_references/pages/windows.eventlogs.evtx/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.Evtx :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.evtx/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.evtx/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -184,4 +184,4 @@
       SELECT * FROM evtxsearch(pathList=fspaths)
       GROUP BY EventRecordID, Channel
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.eventlogs.evtxhunter/index.html b/artifact_references/pages/windows.eventlogs.evtxhunter/index.html
index 0686aa4b1b8..3600e1fbee2 100644
--- a/artifact_references/pages/windows.eventlogs.evtxhunter/index.html
+++ b/artifact_references/pages/windows.eventlogs.evtxhunter/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.EvtxHunter :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.evtxhunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.evtxhunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -202,4 +202,4 @@
         SELECT * FROM evtxsearch(PathList=fspaths)
         GROUP BY EventRecordID, Channel
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.eventlogs.explicitlogon/index.html b/artifact_references/pages/windows.eventlogs.explicitlogon/index.html
index 8e8a0b9bda9..1a54e1e752f 100644
--- a/artifact_references/pages/windows.eventlogs.explicitlogon/index.html
+++ b/artifact_references/pages/windows.eventlogs.explicitlogon/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.ExplicitLogon :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.explicitlogon/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.explicitlogon/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -196,4 +196,4 @@
         SELECT * FROM evtxsearch(PathList=fspaths)
         GROUP BY EventRecordID, Channel
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.eventlogs.kerbroasting/index.html b/artifact_references/pages/windows.eventlogs.kerbroasting/index.html
index db1c891d3a9..ace6c36480c 100644
--- a/artifact_references/pages/windows.eventlogs.kerbroasting/index.html
+++ b/artifact_references/pages/windows.eventlogs.kerbroasting/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.Kerbroasting :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.kerbroasting/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.kerbroasting/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -171,4 +171,4 @@
         SELECT * FROM evtxsearch(PathList=fspaths)
         GROUP BY EventRecordID, Channel
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.eventlogs.modifications/index.html b/artifact_references/pages/windows.eventlogs.modifications/index.html
index 1394010bc2d..26e5413488c 100644
--- a/artifact_references/pages/windows.eventlogs.modifications/index.html
+++ b/artifact_references/pages/windows.eventlogs.modifications/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.Modifications :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.modifications/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.modifications/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -150,4 +150,4 @@
         AND Mtime &lt; DateBeforeTime
       ORDER BY ProviderName
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.eventlogs.powershellmodule/index.html b/artifact_references/pages/windows.eventlogs.powershellmodule/index.html
index 38138cd2e58..3e1e7f2a4f5 100644
--- a/artifact_references/pages/windows.eventlogs.powershellmodule/index.html
+++ b/artifact_references/pages/windows.eventlogs.powershellmodule/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.PowershellModule :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.powershellmodule/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.powershellmodule/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -180,4 +180,4 @@
         FROM hits
         GROUP BY EventRecordID, Channel
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.eventlogs.powershellscriptblock/index.html b/artifact_references/pages/windows.eventlogs.powershellscriptblock/index.html
index 94bda6c5b03..78081aa64e5 100644
--- a/artifact_references/pages/windows.eventlogs.powershellscriptblock/index.html
+++ b/artifact_references/pages/windows.eventlogs.powershellscriptblock/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.PowershellScriptblock :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.powershellscriptblock/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.powershellscriptblock/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -202,4 +202,4 @@
         SELECT * FROM evtxsearch(PathList=fspaths)
         GROUP BY EventRecordID, Channel
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.eventlogs.rdpauth/index.html b/artifact_references/pages/windows.eventlogs.rdpauth/index.html
index 9a29134fc71..e2e230dcce6 100644
--- a/artifact_references/pages/windows.eventlogs.rdpauth/index.html
+++ b/artifact_references/pages/windows.eventlogs.rdpauth/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.RDPAuth :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.rdpauth/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.rdpauth/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -253,4 +253,4 @@
         SELECT * FROM evtxsearch(PathList=fspaths)
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.eventlogs.scheduledtasks/index.html b/artifact_references/pages/windows.eventlogs.scheduledtasks/index.html
index 65b9925f72d..8e916a4ce67 100644
--- a/artifact_references/pages/windows.eventlogs.scheduledtasks/index.html
+++ b/artifact_references/pages/windows.eventlogs.scheduledtasks/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.ScheduledTasks :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.scheduledtasks/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.scheduledtasks/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -290,4 +290,4 @@
         OSPath
       FROM evtxsearch(PathList=fspaths)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.eventlogs.servicecreationcomspec/index.html b/artifact_references/pages/windows.eventlogs.servicecreationcomspec/index.html
index 84fdb3f11ab..419e8db2b3a 100644
--- a/artifact_references/pages/windows.eventlogs.servicecreationcomspec/index.html
+++ b/artifact_references/pages/windows.eventlogs.servicecreationcomspec/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.ServiceCreationComspec :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.servicecreationcomspec/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.servicecreationcomspec/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -152,4 +152,4 @@
         FROM hits
         GROUP BY EventRecordID, Channel
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.eventlogs.symantec/index.html b/artifact_references/pages/windows.eventlogs.symantec/index.html
index 9e11a4aa647..86997c61b6f 100644
--- a/artifact_references/pages/windows.eventlogs.symantec/index.html
+++ b/artifact_references/pages/windows.eventlogs.symantec/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.Symantec :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.symantec/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.symantec/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -134,4 +134,4 @@
                 then= NOT EventData=~IgnoreRegex,
                 else= True)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.eventlogs.telerik/index.html b/artifact_references/pages/windows.eventlogs.telerik/index.html
index 3094138e151..66aac9e64a1 100644
--- a/artifact_references/pages/windows.eventlogs.telerik/index.html
+++ b/artifact_references/pages/windows.eventlogs.telerik/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.Telerik :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.telerik/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.eventlogs.telerik/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -173,4 +173,4 @@
         SELECT * FROM evtxsearch(PathList=fspaths)
         GROUP BY EventRecordID, Channel
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.events.eventlogmodifications/index.html b/artifact_references/pages/windows.events.eventlogmodifications/index.html
index 909a2a99917..826b31bd798 100644
--- a/artifact_references/pages/windows.events.eventlogmodifications/index.html
+++ b/artifact_references/pages/windows.events.eventlogmodifications/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Events.EventLogModifications :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.eventlogmodifications/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.eventlogmodifications/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -114,4 +114,4 @@
       SELECT * FROM diff(query=Query, period=Period, key="QueryKey")
       WHERE Diff =~ "added"
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.events.failedlogbeforesuccess/index.html b/artifact_references/pages/windows.events.failedlogbeforesuccess/index.html
index 16c1c69a721..bffdd359c66 100644
--- a/artifact_references/pages/windows.events.failedlogbeforesuccess/index.html
+++ b/artifact_references/pages/windows.events.failedlogbeforesuccess/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Events.FailedLogBeforeSuccess :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.failedlogbeforesuccess/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.failedlogbeforesuccess/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -150,4 +150,4 @@
            GROUP BY LogonTime
           })  WHERE Count &gt; atoi(string=failureCount)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.events.kerberoasting/index.html b/artifact_references/pages/windows.events.kerberoasting/index.html
index 9ce2118873c..be6cf9e0de5 100644
--- a/artifact_references/pages/windows.events.kerberoasting/index.html
+++ b/artifact_references/pages/windows.events.kerberoasting/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Events.Kerberoasting :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.kerberoasting/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.kerberoasting/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -157,4 +157,4 @@
                 AND NOT EventData.TargetUserName =~ "\\$@"
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.events.kerbroasting/index.html b/artifact_references/pages/windows.events.kerbroasting/index.html
index 65c4b9a5621..64233a8c840 100644
--- a/artifact_references/pages/windows.events.kerbroasting/index.html
+++ b/artifact_references/pages/windows.events.kerbroasting/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Events.Kerbroasting :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.kerbroasting/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.kerbroasting/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -156,4 +156,4 @@
                 AND NOT EventData.TargetUserName =~ &quot;\\$@&quot;
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.events.mutants/index.html b/artifact_references/pages/windows.events.mutants/index.html
index 83cee7350ad..b8be26b69d5 100644
--- a/artifact_references/pages/windows.events.mutants/index.html
+++ b/artifact_references/pages/windows.events.mutants/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Events.Mutants :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.mutants/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.mutants/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -120,4 +120,4 @@
         
         SELECT *, alert(name=AlertName, Name=Name, Type=Type, Exe=Exe) as AlertSent FROM diff(query=query_diff, period=Period, key="Name") WHERE Diff = diff
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.events.processcreation/index.html b/artifact_references/pages/windows.events.processcreation/index.html
index 5b05ba8f938..37ed2f3fb5e 100644
--- a/artifact_references/pages/windows.events.processcreation/index.html
+++ b/artifact_references/pages/windows.events.processcreation/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Events.ProcessCreation :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.processcreation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.processcreation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -108,4 +108,4 @@
                sep=" &lt;- ") AS CallChain
       FROM Delayed
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.events.servicecreation/index.html b/artifact_references/pages/windows.events.servicecreation/index.html
index 79d06c7ce54..aa6cf0670e3 100644
--- a/artifact_references/pages/windows.events.servicecreation/index.html
+++ b/artifact_references/pages/windows.events.servicecreation/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Events.ServiceCreation :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.servicecreation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.servicecreation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -107,4 +107,4 @@
                System as _System
         FROM watch_evtx(filename=systemLogFile) WHERE EventID = 7045
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.events.trackaccount/index.html b/artifact_references/pages/windows.events.trackaccount/index.html
index 38256307141..a289be2dab6 100644
--- a/artifact_references/pages/windows.events.trackaccount/index.html
+++ b/artifact_references/pages/windows.events.trackaccount/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Events.Trackaccount :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.trackaccount/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.trackaccount/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -117,4 +117,4 @@
                 AND EventData.LogonType in LogonTypeRegex
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.events.trackprocesses/index.html b/artifact_references/pages/windows.events.trackprocesses/index.html
index 1d411705976..fe060e6f9d1 100644
--- a/artifact_references/pages/windows.events.trackprocesses/index.html
+++ b/artifact_references/pages/windows.events.trackprocesses/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Events.TrackProcesses :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.trackprocesses/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.trackprocesses/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -205,4 +205,4 @@
       SELECT * FROM process_tracker_updates()
       WHERE update_type = "stats" OR AlsoForwardUpdates
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.events.trackprocessesbasic/index.html b/artifact_references/pages/windows.events.trackprocessesbasic/index.html
index 4daca8c446f..36b1e159dc2 100644
--- a/artifact_references/pages/windows.events.trackprocessesbasic/index.html
+++ b/artifact_references/pages/windows.events.trackprocessesbasic/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Events.TrackProcessesBasic :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.trackprocessesbasic/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.events.trackprocessesbasic/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -118,4 +118,4 @@
       SELECT * FROM process_tracker_updates()
       WHERE update_type = "stats"
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.bam/index.html b/artifact_references/pages/windows.forensics.bam/index.html
index fe8a49fef6b..2a03d22e1c9 100644
--- a/artifact_references/pages/windows.forensics.bam/index.html
+++ b/artifact_references/pages/windows.forensics.bam/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.Bam :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.bam/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.bam/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -115,4 +115,4 @@
         FROM glob(globs=bamKeys.KeyGlob, accessor="registry")
         WHERE Data.type =~ "BINARY"
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.bulkextractor/index.html b/artifact_references/pages/windows.forensics.bulkextractor/index.html
index 0e4f6c285b3..36495688b1a 100644
--- a/artifact_references/pages/windows.forensics.bulkextractor/index.html
+++ b/artifact_references/pages/windows.forensics.bulkextractor/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.BulkExtractor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.bulkextractor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.bulkextractor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -264,4 +264,4 @@
       FROM glob(globs="/**", root=tempfolder)
       WHERE Upload
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.certutil/index.html b/artifact_references/pages/windows.forensics.certutil/index.html
index fe1070ad661..8358844deca 100644
--- a/artifact_references/pages/windows.forensics.certutil/index.html
+++ b/artifact_references/pages/windows.forensics.certutil/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.CertUtil :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.certutil/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.certutil/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -182,4 +182,4 @@
       FROM Files
       WHERE NOT URL =~ URLRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.filenamesearch/index.html b/artifact_references/pages/windows.forensics.filenamesearch/index.html
index ec7405dff9d..7fc8209ebaf 100644
--- a/artifact_references/pages/windows.forensics.filenamesearch/index.html
+++ b/artifact_references/pages/windows.forensics.filenamesearch/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.FilenameSearch :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.filenamesearch/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.filenamesearch/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -123,4 +123,4 @@
              number=1000,
              accessor="ntfs")
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.lnk/index.html b/artifact_references/pages/windows.forensics.lnk/index.html
index 8af67d12ed0..394a3cfdde6 100644
--- a/artifact_references/pages/windows.forensics.lnk/index.html
+++ b/artifact_references/pages/windows.forensics.lnk/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.Lnk :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.lnk/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.lnk/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -1481,4 +1481,4 @@
   - name: ShellLinkHeader.WriteTime
     type: timestamp
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.localhashes.usn/index.html b/artifact_references/pages/windows.forensics.localhashes.usn/index.html
index 6299cadcf1c..0375440c394 100644
--- a/artifact_references/pages/windows.forensics.localhashes.usn/index.html
+++ b/artifact_references/pages/windows.forensics.localhashes.usn/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.LocalHashes.Usn :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.localhashes.usn/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.localhashes.usn/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -171,4 +171,4 @@
   - name: ClientId
     type: client_id
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.partitiontable/index.html b/artifact_references/pages/windows.forensics.partitiontable/index.html
index db1cd50e002..41d6df4ebc0 100644
--- a/artifact_references/pages/windows.forensics.partitiontable/index.html
+++ b/artifact_references/pages/windows.forensics.partitiontable/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.PartitionTable :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.partitiontable/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.partitiontable/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -243,4 +243,4 @@
             Magic, _PartitionPath
         FROM PartitionList
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.prefetch/index.html b/artifact_references/pages/windows.forensics.prefetch/index.html
index 8454305d5aa..f752d8cc2d3 100644
--- a/artifact_references/pages/windows.forensics.prefetch/index.html
+++ b/artifact_references/pages/windows.forensics.prefetch/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.Prefetch :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.prefetch/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.prefetch/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -466,4 +466,4 @@
   - name: ModificationTime
     type: timestamp
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.processinfo/index.html b/artifact_references/pages/windows.forensics.processinfo/index.html
index 5a7e9c0652c..1af7ac8d201 100644
--- a/artifact_references/pages/windows.forensics.processinfo/index.html
+++ b/artifact_references/pages/windows.forensics.processinfo/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.ProcessInfo :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.processinfo/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.processinfo/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -152,4 +152,4 @@
            SELECT * FROM Calculate(PID=Pid)
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.rdpcache/index.html b/artifact_references/pages/windows.forensics.rdpcache/index.html
index c8bf61146bb..1ed6ea75740 100644
--- a/artifact_references/pages/windows.forensics.rdpcache/index.html
+++ b/artifact_references/pages/windows.forensics.rdpcache/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.RDPCache :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.rdpcache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.rdpcache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -114,4 +114,4 @@
       SELECT * FROM if(condition= UploadRDPCache,
         then= upload_results,
         else= results )
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.recentapps/index.html b/artifact_references/pages/windows.forensics.recentapps/index.html
index 046b55ab18e..83f86663a2f 100644
--- a/artifact_references/pages/windows.forensics.recentapps/index.html
+++ b/artifact_references/pages/windows.forensics.recentapps/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.RecentApps :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.recentapps/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.recentapps/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -137,4 +137,4 @@
             SELECT * FROM A1 WHERE LastExecutionTS &gt; ExecutionTimeAfter
           }, else={ SELECT * FROM A1})
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.recyclebin/index.html b/artifact_references/pages/windows.forensics.recyclebin/index.html
index e20ae0ec896..11b9195594d 100644
--- a/artifact_references/pages/windows.forensics.recyclebin/index.html
+++ b/artifact_references/pages/windows.forensics.recyclebin/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.RecycleBin :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.recyclebin/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.recyclebin/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -140,4 +140,4 @@
                  FROM parse_recyclebin(filename=OSPath)
               })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.sam/index.html b/artifact_references/pages/windows.forensics.sam/index.html
index a484762afc5..cb6b3f0260b 100644
--- a/artifact_references/pages/windows.forensics.sam/index.html
+++ b/artifact_references/pages/windows.forensics.sam/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.SAM :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.sam/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.sam/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -221,4 +221,4 @@
   - name: V
     type: hex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.shellbags/index.html b/artifact_references/pages/windows.forensics.shellbags/index.html
index 33296ce92ce..79454bb2809 100644
--- a/artifact_references/pages/windows.forensics.shellbags/index.html
+++ b/artifact_references/pages/windows.forensics.shellbags/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.Shellbags :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.shellbags/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.shellbags/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -178,4 +178,4 @@
   - name: _RawData
     type: base64
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.solarwindssunburst/index.html b/artifact_references/pages/windows.forensics.solarwindssunburst/index.html
index efb2f8b150e..d195b963124 100644
--- a/artifact_references/pages/windows.forensics.solarwindssunburst/index.html
+++ b/artifact_references/pages/windows.forensics.solarwindssunburst/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.SolarwindsSunburst :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.solarwindssunburst/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.solarwindssunburst/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -150,4 +150,4 @@
         hash(path=FileName) AS Hash
       FROM yarahits
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.srum/index.html b/artifact_references/pages/windows.forensics.srum/index.html
index fcfc7e20f9c..0847e34db29 100644
--- a/artifact_references/pages/windows.forensics.srum/index.html
+++ b/artifact_references/pages/windows.forensics.srum/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.SRUM :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.srum/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.srum/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -233,4 +233,4 @@
               GROUP BY App, User,InterfaceLuid
               ORDER BY TotalSent DESC
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.timeline/index.html b/artifact_references/pages/windows.forensics.timeline/index.html
index 0cc52b5d4e3..1ec0df7cd81 100644
--- a/artifact_references/pages/windows.forensics.timeline/index.html
+++ b/artifact_references/pages/windows.forensics.timeline/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.Timeline :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.timeline/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.timeline/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -134,4 +134,4 @@
             SELECT * FROM A1 WHERE LastExecutionTS &gt; ExecutionTimeAfter
           }, else={ SELECT * FROM A1})
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.uefi/index.html b/artifact_references/pages/windows.forensics.uefi/index.html
index 2c0523a9d2f..def0f57acfd 100644
--- a/artifact_references/pages/windows.forensics.uefi/index.html
+++ b/artifact_references/pages/windows.forensics.uefi/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.UEFI :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.uefi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.uefi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -105,4 +105,4 @@
                Path=format(format="%d", args=StartOffset))))
     })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.useraccesslogs/index.html b/artifact_references/pages/windows.forensics.useraccesslogs/index.html
index 00c9f061ce7..f35aafceb82 100644
--- a/artifact_references/pages/windows.forensics.useraccesslogs/index.html
+++ b/artifact_references/pages/windows.forensics.useraccesslogs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.UserAccessLogs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.useraccesslogs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.useraccesslogs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -234,4 +234,4 @@
         SELECT OSPath, if(condition=AlsoUpload, then=upload(file=OSPath))
         FROM glob(globs=SUMGlob)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.forensics.usn/index.html b/artifact_references/pages/windows.forensics.usn/index.html
index b31315f4c18..b3167f24975 100644
--- a/artifact_references/pages/windows.forensics.usn/index.html
+++ b/artifact_references/pages/windows.forensics.usn/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.Usn :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.usn/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.forensics.usn/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -181,4 +181,4 @@
                 AND _Links =~ PathRegex
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.kapefiles.extract/index.html b/artifact_references/pages/windows.kapefiles.extract/index.html
index b3e7fd0fcfc..f296b7c3768 100644
--- a/artifact_references/pages/windows.kapefiles.extract/index.html
+++ b/artifact_references/pages/windows.kapefiles.extract/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.KapeFiles.Extract :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.kapefiles.extract/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.kapefiles.extract/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -162,4 +162,4 @@
           file=RootPathSpec + _Components) AS UploadedFile
       FROM ALLUploads
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.kapefiles.targets/index.html b/artifact_references/pages/windows.kapefiles.targets/index.html
index 23aa94d7246..f4ab7ccff87 100644
--- a/artifact_references/pages/windows.kapefiles.targets/index.html
+++ b/artifact_references/pages/windows.kapefiles.targets/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.KapeFiles.Targets :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.kapefiles.targets/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.kapefiles.targets/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -2639,4 +2639,4 @@
       {{ Query $query | Table }}
 
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.memory.acquisition/index.html b/artifact_references/pages/windows.memory.acquisition/index.html
index 7607aafea28..1634d3214b2 100644
--- a/artifact_references/pages/windows.memory.acquisition/index.html
+++ b/artifact_references/pages/windows.memory.acquisition/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Memory.Acquisition :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.memory.acquisition/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.memory.acquisition/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -102,4 +102,4 @@
             FROM execve(argv=[OSPath, Tempfile], sep="\r\n")
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.memory.intezer/index.html b/artifact_references/pages/windows.memory.intezer/index.html
index bfa096fe65b..372cfd7afe3 100644
--- a/artifact_references/pages/windows.memory.intezer/index.html
+++ b/artifact_references/pages/windows.memory.intezer/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Memory.Intezer :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.memory.intezer/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.memory.intezer/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -115,4 +115,4 @@
       -- execute payload
       SELECT * FROM execve(argv=[ bin.OSPath[0], '-k', ApiKey ])
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.memory.pedump/index.html b/artifact_references/pages/windows.memory.pedump/index.html
index b6da8205c2b..a1a41e1073a 100644
--- a/artifact_references/pages/windows.memory.pedump/index.html
+++ b/artifact_references/pages/windows.memory.pedump/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Memory.PEDump :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.memory.pedump/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.memory.pedump/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -121,4 +121,4 @@
      FROM vad(pid=9604)
      WHERE Header =~ "^MZ" AND MappingName =~ FilenameRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.memory.processdump/index.html b/artifact_references/pages/windows.memory.processdump/index.html
index 59ae129d59f..5698242a8f9 100644
--- a/artifact_references/pages/windows.memory.processdump/index.html
+++ b/artifact_references/pages/windows.memory.processdump/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Memory.ProcessDump :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.memory.processdump/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.memory.processdump/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -126,4 +126,4 @@
              SELECT * FROM UploadDump(Pid=Pid, ProcessName = ProcessName, CommandLine = CommandLine)
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.memory.processinfo/index.html b/artifact_references/pages/windows.memory.processinfo/index.html
index 0128af00318..0482476f0f6 100644
--- a/artifact_references/pages/windows.memory.processinfo/index.html
+++ b/artifact_references/pages/windows.memory.processinfo/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Memory.ProcessInfo :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.memory.processinfo/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.memory.processinfo/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -167,4 +167,4 @@
             SELECT * FROM Calculate(PID=Pid)
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.network.arpcache/index.html b/artifact_references/pages/windows.network.arpcache/index.html
index dc275e0e0cb..7ec6c842c31 100644
--- a/artifact_references/pages/windows.network.arpcache/index.html
+++ b/artifact_references/pages/windows.network.arpcache/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Network.ArpCache :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.network.arpcache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.network.arpcache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -130,4 +130,4 @@
              WHERE InterfaceIndex = Index
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.network.interfaceaddresses/index.html b/artifact_references/pages/windows.network.interfaceaddresses/index.html
index 6132a749f20..8f12d192351 100644
--- a/artifact_references/pages/windows.network.interfaceaddresses/index.html
+++ b/artifact_references/pages/windows.network.interfaceaddresses/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Network.InterfaceAddresses :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.network.interfaceaddresses/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.network.interfaceaddresses/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -83,4 +83,4 @@
            Flags, Addrs.IP as IP, Addrs.Mask.String as Mask
         FROM flatten(query=interface_address)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.network.listeningports/index.html b/artifact_references/pages/windows.network.listeningports/index.html
index cee9a572df0..5e24dbdc825 100644
--- a/artifact_references/pages/windows.network.listeningports/index.html
+++ b/artifact_references/pages/windows.network.listeningports/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Network.ListeningPorts :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.network.listeningports/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.network.listeningports/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -90,4 +90,4 @@
             FROM process where Pid = PortPid
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526432></script><script src=/js/perfect-scrollbar.min.js?1699526432></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526432></script><script src=/js/jquery.sticky.js?1699526432></script><script src=/js/featherlight.min.js?1699526432></script><script src=/js/highlight.min.js?1699526432></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526432></script><script src=/js/learn.js?1699526432></script><script src=/js/hugo-learn.js?1699526432></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.network.netstat/index.html b/artifact_references/pages/windows.network.netstat/index.html
index 5a1999a78a5..04e9c376d9a 100644
--- a/artifact_references/pages/windows.network.netstat/index.html
+++ b/artifact_references/pages/windows.network.netstat/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Network.Netstat :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.network.netstat/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.network.netstat/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -91,4 +91,4 @@
       Timestamp
     FROM netstat()
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.network.netstatenriched/index.html b/artifact_references/pages/windows.network.netstatenriched/index.html
index 7c67c363b40..d2c2bb8e9ad 100644
--- a/artifact_references/pages/windows.network.netstatenriched/index.html
+++ b/artifact_references/pages/windows.network.netstatenriched/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Network.NetstatEnriched :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526432 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526432 rel=stylesheet><link href=/css/featherlight.min.css?1699526432 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526432 rel=stylesheet><link href=/css/auto-complete.css?1699526432 rel=stylesheet><link href=/css/theme.css?1699526432 rel=stylesheet><link href=/css/tabs.css?1699526432 rel=stylesheet><link href=/css/hugo-theme.css?1699526432 rel=stylesheet><link href=/css/theme-mine.css?1699526432 rel=stylesheet><link href=/css/dark.css?1699526432 rel=stylesheet><link href=/css/syntax.css?1699526432 rel=stylesheet><link href=/css/light.css?1699526432 rel=stylesheet><link href=/css/hljs.css?1699526432 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526432 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526432></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.network.netstatenriched/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.network.netstatenriched/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -301,4 +301,4 @@
             catch = results
         )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.network.packetcapture/index.html b/artifact_references/pages/windows.network.packetcapture/index.html
index 72cae22df46..b804c5bb6c8 100644
--- a/artifact_references/pages/windows.network.packetcapture/index.html
+++ b/artifact_references/pages/windows.network.packetcapture/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Network.PacketCapture :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.network.packetcapture/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.network.packetcapture/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -148,4 +148,4 @@
                 else={ SELECT * FROM end_trace }
         )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.ntfs.adshunter/index.html b/artifact_references/pages/windows.ntfs.adshunter/index.html
index 435e7cacdd2..0e0d073e106 100644
--- a/artifact_references/pages/windows.ntfs.adshunter/index.html
+++ b/artifact_references/pages/windows.ntfs.adshunter/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.NTFS.ADSHunter :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.ntfs.adshunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.ntfs.adshunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -173,4 +173,4 @@
       SELECT * FROM if(condition=UploadDataStream,
                         then= upload_hits,
                         else= hits)
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.ntfs.extendedattributes/index.html b/artifact_references/pages/windows.ntfs.extendedattributes/index.html
index 569d4483484..6c9b8f09624 100644
--- a/artifact_references/pages/windows.ntfs.extendedattributes/index.html
+++ b/artifact_references/pages/windows.ntfs.extendedattributes/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.NTFS.ExtendedAttributes :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.ntfs.extendedattributes/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.ntfs.extendedattributes/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -218,4 +218,4 @@
         then=upload_hits,
         else=flatten_results)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.ntfs.i30/index.html b/artifact_references/pages/windows.ntfs.i30/index.html
index 138d3d698e7..336bf7c9904 100644
--- a/artifact_references/pages/windows.ntfs.i30/index.html
+++ b/artifact_references/pages/windows.ntfs.i30/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.NTFS.I30 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.ntfs.i30/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.ntfs.i30/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -139,4 +139,4 @@
             WHERE IsSlack = true or NOT SlackOnly
        })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.ntfs.mft/index.html b/artifact_references/pages/windows.ntfs.mft/index.html
index f9b6dc1fb71..99c51ba99ff 100644
--- a/artifact_references/pages/windows.ntfs.mft/index.html
+++ b/artifact_references/pages/windows.ntfs.mft/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.NTFS.MFT :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.ntfs.mft/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.ntfs.mft/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -344,4 +344,4 @@
         then= enriched_results,
         else= results)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.ntfs.recover/index.html b/artifact_references/pages/windows.ntfs.recover/index.html
index 3b4927bc601..7d1e1b8e684 100644
--- a/artifact_references/pages/windows.ntfs.recover/index.html
+++ b/artifact_references/pages/windows.ntfs.recover/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.NTFS.Recover :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.ntfs.recover/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.ntfs.recover/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -116,4 +116,4 @@
               FROM scope()
             })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.osquery.generic/index.html b/artifact_references/pages/windows.osquery.generic/index.html
index 1ccc808fd0a..3f099488b2b 100644
--- a/artifact_references/pages/windows.osquery.generic/index.html
+++ b/artifact_references/pages/windows.osquery.generic/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.OSQuery.Generic :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.osquery.generic/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.osquery.generic/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -111,4 +111,4 @@
          SELECT * FROM parse_json_array(data=Stdout)
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.packs.lateralmovement/index.html b/artifact_references/pages/windows.packs.lateralmovement/index.html
index 3b7b486b490..61bb648992b 100644
--- a/artifact_references/pages/windows.packs.lateralmovement/index.html
+++ b/artifact_references/pages/windows.packs.lateralmovement/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Packs.LateralMovement :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.packs.lateralmovement/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.packs.lateralmovement/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -101,4 +101,4 @@
       SELECT * FROM Artifact.Windows.System.Amcache()
       WHERE Binary =~ "wmic.exe"
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.packs.persistence/index.html b/artifact_references/pages/windows.packs.persistence/index.html
index 69a325e2582..8a14bc07060 100644
--- a/artifact_references/pages/windows.packs.persistence/index.html
+++ b/artifact_references/pages/windows.packs.persistence/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Packs.Persistence :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.packs.persistence/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.packs.persistence/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -103,4 +103,4 @@
     query: |
       SELECT * FROM Artifact.Windows.Persistence.Debug()
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.persistence.debug/index.html b/artifact_references/pages/windows.persistence.debug/index.html
index 044c0a1373d..28ad332a05f 100644
--- a/artifact_references/pages/windows.persistence.debug/index.html
+++ b/artifact_references/pages/windows.persistence.debug/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Persistence.Debug :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.persistence.debug/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.persistence.debug/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -111,4 +111,4 @@
         WHERE Debugger
         Order By KeyLastWriteTimestamp
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.persistence.permanentwmievents/index.html b/artifact_references/pages/windows.persistence.permanentwmievents/index.html
index a2fdea3a8a7..2efc42309c2 100644
--- a/artifact_references/pages/windows.persistence.permanentwmievents/index.html
+++ b/artifact_references/pages/windows.persistence.permanentwmievents/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Persistence.PermanentWMIEvents :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.persistence.permanentwmievents/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.persistence.permanentwmievents/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -150,4 +150,4 @@
                  FROM FilterToConsumerBinding
                  WHERE (FilterDetails OR ConsumerDetails)
             },workers=len(list=namespaces))
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.persistence.powershellprofile/index.html b/artifact_references/pages/windows.persistence.powershellprofile/index.html
index 4abce4518be..7cb1d7f46a6 100644
--- a/artifact_references/pages/windows.persistence.powershellprofile/index.html
+++ b/artifact_references/pages/windows.persistence.powershellprofile/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Persistence.PowershellProfile :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.persistence.powershellprofile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.persistence.powershellprofile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -138,4 +138,4 @@
                         then= Content=~StringWhiteList,
                         else= False)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.persistence.powershellregistry/index.html b/artifact_references/pages/windows.persistence.powershellregistry/index.html
index 0641705dcd1..8ec28f1aa5b 100644
--- a/artifact_references/pages/windows.persistence.powershellregistry/index.html
+++ b/artifact_references/pages/windows.persistence.powershellregistry/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Persistence.PowershellRegistry :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.persistence.powershellregistry/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.persistence.powershellregistry/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -124,4 +124,4 @@
               rules=yaraRule, context=50)
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.persistence.wow64cpu/index.html b/artifact_references/pages/windows.persistence.wow64cpu/index.html
index cbd3bbd80ae..b9e37aff384 100644
--- a/artifact_references/pages/windows.persistence.wow64cpu/index.html
+++ b/artifact_references/pages/windows.persistence.wow64cpu/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Persistence.Wow64cpu :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.persistence.wow64cpu/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.persistence.wow64cpu/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -94,4 +94,4 @@
       WHERE Data.value and
         not (Name = "@" and (Data.value =~ "(wow64cpu.dll|wowarmhw.dll|xtajit.dll)"))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.registry.appcompatcache/index.html b/artifact_references/pages/windows.registry.appcompatcache/index.html
index 2fdff940a08..f5d3dc633d3 100644
--- a/artifact_references/pages/windows.registry.appcompatcache/index.html
+++ b/artifact_references/pages/windows.registry.appcompatcache/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.AppCompatCache :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.appcompatcache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.appcompatcache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -243,4 +243,4 @@
         },
         else= mutli_controlset )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.registry.backuprestore/index.html b/artifact_references/pages/windows.registry.backuprestore/index.html
index efd3c375556..5c6f61620c4 100644
--- a/artifact_references/pages/windows.registry.backuprestore/index.html
+++ b/artifact_references/pages/windows.registry.backuprestore/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.BackupRestore :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.backuprestore/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.backuprestore/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -103,4 +103,4 @@
       WHERE NOT KeyType ='key'
       GROUP BY ModTime, KeyName,KeyValue,KeyType
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.registry.enabledmacro/index.html b/artifact_references/pages/windows.registry.enabledmacro/index.html
index 7a07d15aa80..3a63e10bfd9 100644
--- a/artifact_references/pages/windows.registry.enabledmacro/index.html
+++ b/artifact_references/pages/windows.registry.enabledmacro/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.EnabledMacro :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.enabledmacro/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.enabledmacro/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -120,4 +120,4 @@
               and encode(string=Data.value, type="hex") =~ "ffffff7f$"
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.registry.enableunsafeclientmailrules/index.html b/artifact_references/pages/windows.registry.enableunsafeclientmailrules/index.html
index 024854fa846..8c287d68437 100644
--- a/artifact_references/pages/windows.registry.enableunsafeclientmailrules/index.html
+++ b/artifact_references/pages/windows.registry.enableunsafeclientmailrules/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.EnableUnsafeClientMailRules :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.enableunsafeclientmailrules/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.enableunsafeclientmailrules/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -122,4 +122,4 @@
               WHERE EnableUnsafeClientMailRules = 1
            })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.registry.mountpoints2/index.html b/artifact_references/pages/windows.registry.mountpoints2/index.html
index b2dfbdb2f2c..bd6c3e77de7 100644
--- a/artifact_references/pages/windows.registry.mountpoints2/index.html
+++ b/artifact_references/pages/windows.registry.mountpoints2/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.MountPoints2 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.mountpoints2/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.mountpoints2/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -104,4 +104,4 @@
         FROM Artifact.Windows.Registry.NTUser(KeyGlob=KeyGlob)
         WHERE OSPath =~ MountPointFilterRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.registry.ntuser.upload/index.html b/artifact_references/pages/windows.registry.ntuser.upload/index.html
index c5a71978d50..122dc339a1d 100644
--- a/artifact_references/pages/windows.registry.ntuser.upload/index.html
+++ b/artifact_references/pages/windows.registry.ntuser.upload/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.NTUser.Upload :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.ntuser.upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.ntuser.upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -107,4 +107,4 @@
                       accessor="auto") as Upload
         FROM users
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.registry.ntuser/index.html b/artifact_references/pages/windows.registry.ntuser/index.html
index cf013faf3a6..fda7a2fd1c0 100644
--- a/artifact_references/pages/windows.registry.ntuser/index.html
+++ b/artifact_references/pages/windows.registry.ntuser/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.NTUser :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.ntuser/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.ntuser/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -189,4 +189,4 @@
 DelegatePath=OSPath,
 Path="/"),
 accessor="raw_reg")
-})</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+})</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.registry.portproxy/index.html b/artifact_references/pages/windows.registry.portproxy/index.html
index c410c5cf860..52724878526 100644
--- a/artifact_references/pages/windows.registry.portproxy/index.html
+++ b/artifact_references/pages/windows.registry.portproxy/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.PortProxy :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.portproxy/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.portproxy/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -151,4 +151,4 @@
 
       {{ Query "report"  "SELECT Fqdn, ProxyType, Protocol, Listening, Destination, ModifiedTime FROM report" | Table }}
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.registry.puttyhostkeys/index.html b/artifact_references/pages/windows.registry.puttyhostkeys/index.html
index ae32ec108d4..bb8fe346ac0 100644
--- a/artifact_references/pages/windows.registry.puttyhostkeys/index.html
+++ b/artifact_references/pages/windows.registry.puttyhostkeys/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.PuttyHostKeys :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.puttyhostkeys/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.puttyhostkeys/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -115,4 +115,4 @@
         AND KeyValue =~ TargetKeyValue
 
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.registry.rdp/index.html b/artifact_references/pages/windows.registry.rdp/index.html
index d867090d7a2..97a3d5b26ed 100644
--- a/artifact_references/pages/windows.registry.rdp/index.html
+++ b/artifact_references/pages/windows.registry.rdp/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.RDP :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.rdp/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.rdp/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -175,4 +175,4 @@
         LastWriteTime,
         find_mru(sid=SID).KeyValue as Mru
       FROM results
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.registry.recentdocs/index.html b/artifact_references/pages/windows.registry.recentdocs/index.html
index 7cb7988be08..bf49f380798 100644
--- a/artifact_references/pages/windows.registry.recentdocs/index.html
+++ b/artifact_references/pages/windows.registry.recentdocs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.RecentDocs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.recentdocs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.recentdocs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -262,4 +262,4 @@
         })
       WHERE format(format='%v', args=MruEntries) =~ EntryRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.registry.sysinternals.eulacheck/index.html b/artifact_references/pages/windows.registry.sysinternals.eulacheck/index.html
index 2198656a620..90d28d49ee6 100644
--- a/artifact_references/pages/windows.registry.sysinternals.eulacheck/index.html
+++ b/artifact_references/pages/windows.registry.sysinternals.eulacheck/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.Sysinternals.Eulacheck :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.sysinternals.eulacheck/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.sysinternals.eulacheck/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -123,4 +123,4 @@
       SELECT *
       FROM Artifact.Windows.Registry.Sysinternals.Eulacheck(source="RegistryAPI")
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.registry.userassist/index.html b/artifact_references/pages/windows.registry.userassist/index.html
index c6e7b8d5c7c..789f4669d8e 100644
--- a/artifact_references/pages/windows.registry.userassist/index.html
+++ b/artifact_references/pages/windows.registry.userassist/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.UserAssist :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.userassist/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.userassist/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -173,4 +173,4 @@
           },
           else={ SELECT * FROM A1})
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.registry.wdigest/index.html b/artifact_references/pages/windows.registry.wdigest/index.html
index 506873326b3..74d3a505fc0 100644
--- a/artifact_references/pages/windows.registry.wdigest/index.html
+++ b/artifact_references/pages/windows.registry.wdigest/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.WDigest :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.wdigest/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.registry.wdigest/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -144,4 +144,4 @@
   - name: LastModified
     type: timestamp
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.remediation.quarantine/index.html b/artifact_references/pages/windows.remediation.quarantine/index.html
index 4f7568255f8..55f081a9aaa 100644
--- a/artifact_references/pages/windows.remediation.quarantine/index.html
+++ b/artifact_references/pages/windows.remediation.quarantine/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Remediation.Quarantine :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.remediation.quarantine/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.remediation.quarantine/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -366,4 +366,4 @@
                           h=final_check)
                   })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.remediation.quarantinemonitor/index.html b/artifact_references/pages/windows.remediation.quarantinemonitor/index.html
index af906c07e1e..4a54854b12f 100644
--- a/artifact_references/pages/windows.remediation.quarantinemonitor/index.html
+++ b/artifact_references/pages/windows.remediation.quarantinemonitor/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Remediation.QuarantineMonitor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.remediation.quarantinemonitor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.remediation.quarantinemonitor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -128,4 +128,4 @@
             MessageBox=MessageBox)
        })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.remediation.scheduledtasks/index.html b/artifact_references/pages/windows.remediation.scheduledtasks/index.html
index a3acd0ebc68..f896d59db90 100644
--- a/artifact_references/pages/windows.remediation.scheduledtasks/index.html
+++ b/artifact_references/pages/windows.remediation.scheduledtasks/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Remediation.ScheduledTasks :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.remediation.scheduledtasks/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.remediation.scheduledtasks/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -142,4 +142,4 @@
             })
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.remediation.sinkhole/index.html b/artifact_references/pages/windows.remediation.sinkhole/index.html
index 24ad8f67451..c8e99ab80ad 100644
--- a/artifact_references/pages/windows.remediation.sinkhole/index.html
+++ b/artifact_references/pages/windows.remediation.sinkhole/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Remediation.Sinkhole :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.remediation.sinkhole/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.remediation.sinkhole/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -272,4 +272,4 @@
       -- Finally show resultant HostsFile
       SELECT * FROM Artifact.Windows.System.HostsFile(HostsFile=HostsFile)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.search.filefinder/index.html b/artifact_references/pages/windows.search.filefinder/index.html
index f62e86253ff..4ee6ce72685 100644
--- a/artifact_references/pages/windows.search.filefinder/index.html
+++ b/artifact_references/pages/windows.search.filefinder/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Search.FileFinder :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.search.filefinder/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.search.filefinder/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -228,4 +228,4 @@
   - name: Upload
     type: preview_upload
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.search.smbfilefinder/index.html b/artifact_references/pages/windows.search.smbfilefinder/index.html
index 3a59f3422e5..22744789510 100644
--- a/artifact_references/pages/windows.search.smbfilefinder/index.html
+++ b/artifact_references/pages/windows.search.smbfilefinder/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Search.SMBFileFinder :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.search.smbfilefinder/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.search.smbfilefinder/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -221,4 +221,4 @@
   - name: Upload
     type: preview_upload
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.search.vss/index.html b/artifact_references/pages/windows.search.vss/index.html
index 29d3bb2f765..3cc1bc4ab9f 100644
--- a/artifact_references/pages/windows.search.vss/index.html
+++ b/artifact_references/pages/windows.search.vss/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Search.VSS :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.search.vss/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.search.vss/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -100,4 +100,4 @@
       SELECT * FROM glob(globs=SearchFilesGlob, accessor="ntfs_vss")
       ORDER BY OSPath
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.search.yara/index.html b/artifact_references/pages/windows.search.yara/index.html
index fee555bfe29..2811e6aa980 100644
--- a/artifact_references/pages/windows.search.yara/index.html
+++ b/artifact_references/pages/windows.search.yara/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Search.Yara :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.search.yara/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.search.yara/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -138,4 +138,4 @@
         SELECT *, if(condition=AlsoUpload, then=upload(file=FileName)) AS Upload
         FROM foreach(row=fileList, query=search)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.sys.allusers/index.html b/artifact_references/pages/windows.sys.allusers/index.html
index aa597c6d480..655066a9381 100644
--- a/artifact_references/pages/windows.sys.allusers/index.html
+++ b/artifact_references/pages/windows.sys.allusers/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Sys.AllUsers :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.allusers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.allusers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -195,4 +195,4 @@
       {{ end }}
       {{ Query "users" "SELECT Name, UUID, Type, Mtime FROM users" | Table }}
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.sys.appcompatshims/index.html b/artifact_references/pages/windows.sys.appcompatshims/index.html
index a2ed0774624..14861c1d9a8 100644
--- a/artifact_references/pages/windows.sys.appcompatshims/index.html
+++ b/artifact_references/pages/windows.sys.appcompatshims/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Sys.AppcompatShims :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.appcompatshims/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.appcompatshims/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -126,4 +126,4 @@
 
         SELECT * from result
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.sys.certificateauthorities/index.html b/artifact_references/pages/windows.sys.certificateauthorities/index.html
index d3d5c2ee6b5..f72b92fe8cf 100644
--- a/artifact_references/pages/windows.sys.certificateauthorities/index.html
+++ b/artifact_references/pages/windows.sys.certificateauthorities/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Sys.CertificateAuthorities :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.certificateauthorities/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.certificateauthorities/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -84,4 +84,4 @@
                NotBefore, NotAfter, HexSerialNumber
         FROM certificates()
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.sys.diskinfo/index.html b/artifact_references/pages/windows.sys.diskinfo/index.html
index 33be0f61eff..a717dd70c0d 100644
--- a/artifact_references/pages/windows.sys.diskinfo/index.html
+++ b/artifact_references/pages/windows.sys.diskinfo/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Sys.DiskInfo :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.diskinfo/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.diskinfo/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -91,4 +91,4 @@
            query="SELECT * from Win32_DiskDrive",
            namespace="ROOT\\CIMV2")
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.sys.drivers/index.html b/artifact_references/pages/windows.sys.drivers/index.html
index 0c0268cd25a..cd31f87a923 100644
--- a/artifact_references/pages/windows.sys.drivers/index.html
+++ b/artifact_references/pages/windows.sys.drivers/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Sys.Drivers :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.drivers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.drivers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -120,4 +120,4 @@
           WHERE NOT Issuer =~ "Microsoft"
           GROUP BY Issuer
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.sys.firewallrules/index.html b/artifact_references/pages/windows.sys.firewallrules/index.html
index a36713e1513..406c33ff8fe 100644
--- a/artifact_references/pages/windows.sys.firewallrules/index.html
+++ b/artifact_references/pages/windows.sys.firewallrules/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Sys.FirewallRules :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.firewallrules/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.firewallrules/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -115,4 +115,4 @@
                Record.Name as Name
         FROM rules
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.sys.interfaces/index.html b/artifact_references/pages/windows.sys.interfaces/index.html
index 1c9876a9e4a..1d1f715de55 100644
--- a/artifact_references/pages/windows.sys.interfaces/index.html
+++ b/artifact_references/pages/windows.sys.interfaces/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Sys.Interfaces :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.interfaces/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.interfaces/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -102,4 +102,4 @@
         ]
      ) As Details FROM interfaces
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.sys.physicalmemoryranges/index.html b/artifact_references/pages/windows.sys.physicalmemoryranges/index.html
index ff360dcee67..4835f4fcfd7 100644
--- a/artifact_references/pages/windows.sys.physicalmemoryranges/index.html
+++ b/artifact_references/pages/windows.sys.physicalmemoryranges/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Sys.PhysicalMemoryRanges :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.physicalmemoryranges/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.physicalmemoryranges/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -131,4 +131,4 @@
               })
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.sys.programs/index.html b/artifact_references/pages/windows.sys.programs/index.html
index e6614bbdb36..c74aa83504e 100644
--- a/artifact_references/pages/windows.sys.programs/index.html
+++ b/artifact_references/pages/windows.sys.programs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Sys.Programs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.programs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.programs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -109,4 +109,4 @@
         FROM read_reg_key(globs=split(string=programKeys, sep=',[\\s]*'),
                           accessor="registry")
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.sys.startupitems/index.html b/artifact_references/pages/windows.sys.startupitems/index.html
index 103454001a8..a542b5677d6 100644
--- a/artifact_references/pages/windows.sys.startupitems/index.html
+++ b/artifact_references/pages/windows.sys.startupitems/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Sys.StartupItems :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.startupitems/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.startupitems/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -163,4 +163,4 @@
            first=registry_runners,
            second=file_runners)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527370></script><script src=/js/perfect-scrollbar.min.js?1699527370></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527370></script><script src=/js/jquery.sticky.js?1699527370></script><script src=/js/featherlight.min.js?1699527370></script><script src=/js/highlight.min.js?1699527370></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527370></script><script src=/js/learn.js?1699527370></script><script src=/js/hugo-learn.js?1699527370></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.sys.users/index.html b/artifact_references/pages/windows.sys.users/index.html
index ae3744c0261..bef00f126d4 100644
--- a/artifact_references/pages/windows.sys.users/index.html
+++ b/artifact_references/pages/windows.sys.users/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Sys.Users :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.users/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sys.users/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -114,4 +114,4 @@
            ) AS Data
         FROM read_reg_key(globs=remoteRegKey, accessor="registry")
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.sysinternals.autoruns/index.html b/artifact_references/pages/windows.sysinternals.autoruns/index.html
index ad720ae1187..ede4e6ff1d7 100644
--- a/artifact_references/pages/windows.sysinternals.autoruns/index.html
+++ b/artifact_references/pages/windows.sysinternals.autoruns/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Sysinternals.Autoruns :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sysinternals.autoruns/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527370 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527370 rel=stylesheet><link href=/css/featherlight.min.css?1699527370 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527370 rel=stylesheet><link href=/css/auto-complete.css?1699527370 rel=stylesheet><link href=/css/theme.css?1699527370 rel=stylesheet><link href=/css/tabs.css?1699527370 rel=stylesheet><link href=/css/hugo-theme.css?1699527370 rel=stylesheet><link href=/css/theme-mine.css?1699527370 rel=stylesheet><link href=/css/dark.css?1699527370 rel=stylesheet><link href=/css/syntax.css?1699527370 rel=stylesheet><link href=/css/light.css?1699527370 rel=stylesheet><link href=/css/hljs.css?1699527370 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527370 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527370></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sysinternals.autoruns/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -183,4 +183,4 @@
           })
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.sysinternals.sysmoninstall/index.html b/artifact_references/pages/windows.sysinternals.sysmoninstall/index.html
index 76ed13f0668..e973562a3e7 100644
--- a/artifact_references/pages/windows.sysinternals.sysmoninstall/index.html
+++ b/artifact_references/pages/windows.sysinternals.sysmoninstall/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Sysinternals.SysmonInstall :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sysinternals.sysmoninstall/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sysinternals.sysmoninstall/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -150,4 +150,4 @@
     then={ SELECT * FROM doit },
     else={ SELECT * FROM ensure_service_running })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.sysinternals.sysmonlogforward/index.html b/artifact_references/pages/windows.sysinternals.sysmonlogforward/index.html
index 2826785c24f..b8b0bb80471 100644
--- a/artifact_references/pages/windows.sysinternals.sysmonlogforward/index.html
+++ b/artifact_references/pages/windows.sysinternals.sysmonlogforward/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Sysinternals.SysmonLogForward :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sysinternals.sysmonlogforward/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.sysinternals.sysmonlogforward/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -105,4 +105,4 @@
            get(member='EventData') AS EventData
     FROM watch_etw(guid='{5770385f-c22a-43e0-bf4c-06f5698ffbd9}')
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.amcache/index.html b/artifact_references/pages/windows.system.amcache/index.html
index a3c5f909f4b..96c79d08447 100644
--- a/artifact_references/pages/windows.system.amcache/index.html
+++ b/artifact_references/pages/windows.system.amcache/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.Amcache :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.amcache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.amcache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -188,4 +188,4 @@
 
       {{ Query "timeline" | Table }}
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.auditpolicy/index.html b/artifact_references/pages/windows.system.auditpolicy/index.html
index 4e52db66a18..dc20824d28e 100644
--- a/artifact_references/pages/windows.system.auditpolicy/index.html
+++ b/artifact_references/pages/windows.system.auditpolicy/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.AuditPolicy :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.auditpolicy/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.auditpolicy/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -100,4 +100,4 @@
         }
       )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.catfiles/index.html b/artifact_references/pages/windows.system.catfiles/index.html
index 32902514e20..a252166b490 100644
--- a/artifact_references/pages/windows.system.catfiles/index.html
+++ b/artifact_references/pages/windows.system.catfiles/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.CatFiles :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.catfiles/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.catfiles/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -118,4 +118,4 @@
             })
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.cmdshell/index.html b/artifact_references/pages/windows.system.cmdshell/index.html
index e700299bc88..4475709c170 100644
--- a/artifact_references/pages/windows.system.cmdshell/index.html
+++ b/artifact_references/pages/windows.system.cmdshell/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.CmdShell :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.cmdshell/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.cmdshell/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -112,4 +112,4 @@
   - query: |
       SELECT * FROM execve(argv=["cmd.exe", "/c", Command])
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.criticalservices/index.html b/artifact_references/pages/windows.system.criticalservices/index.html
index f1aaced5d88..187e23af4f7 100644
--- a/artifact_references/pages/windows.system.criticalservices/index.html
+++ b/artifact_references/pages/windows.system.criticalservices/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.CriticalServices :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.criticalservices/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.criticalservices/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -107,4 +107,4 @@
          FROM Artifact.Windows.System.Services()
          WHERE Critical AND State != "Running"
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.dlls/index.html b/artifact_references/pages/windows.system.dlls/index.html
index 407147df8de..3b6236edba0 100644
--- a/artifact_references/pages/windows.system.dlls/index.html
+++ b/artifact_references/pages/windows.system.dlls/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.DLLs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.dlls/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.dlls/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -143,4 +143,4 @@
                                         then= cert_nohash,
                                         else= results )))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.dnscache/index.html b/artifact_references/pages/windows.system.dnscache/index.html
index 47cf433bf6d..7a841e9307f 100644
--- a/artifact_references/pages/windows.system.dnscache/index.html
+++ b/artifact_references/pages/windows.system.dnscache/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.DNSCache :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.dnscache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.dnscache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -229,4 +229,4 @@
 
       SELECT * FROM dns_cache_entries
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.domainrole/index.html b/artifact_references/pages/windows.system.domainrole/index.html
index 830cf1545aa..85b4cedb4f9 100644
--- a/artifact_references/pages/windows.system.domainrole/index.html
+++ b/artifact_references/pages/windows.system.domainrole/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.DomainRole :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.domainrole/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.domainrole/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -115,4 +115,4 @@
             DNSHostName =~ HostNameRegex
             AND Domain =~ DomainRegex
             AND DomainRole =~ RoleRegex
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.handles/index.html b/artifact_references/pages/windows.system.handles/index.html
index a964c311e26..5a004dd3360 100644
--- a/artifact_references/pages/windows.system.handles/index.html
+++ b/artifact_references/pages/windows.system.handles/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.Handles :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.handles/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.handles/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -109,4 +109,4 @@
             FROM handles(pid=ProcPid, types=tokens.Type)
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.hostsfile/index.html b/artifact_references/pages/windows.system.hostsfile/index.html
index 57ac135eb32..3a05d39be92 100644
--- a/artifact_references/pages/windows.system.hostsfile/index.html
+++ b/artifact_references/pages/windows.system.hostsfile/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.HostsFile :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.hostsfile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.hostsfile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -137,4 +137,4 @@
         Record.Comment AS Comment
       FROM results
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.localadmins/index.html b/artifact_references/pages/windows.system.localadmins/index.html
index 0e0272ab64e..ed4e6c7004d 100644
--- a/artifact_references/pages/windows.system.localadmins/index.html
+++ b/artifact_references/pages/windows.system.localadmins/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.LocalAdmins :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.localadmins/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.localadmins/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -107,4 +107,4 @@
           FROM scope()
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.powershell.moduleanalysiscache/index.html b/artifact_references/pages/windows.system.powershell.moduleanalysiscache/index.html
index 65be6efae34..3c16f39fc83 100644
--- a/artifact_references/pages/windows.system.powershell.moduleanalysiscache/index.html
+++ b/artifact_references/pages/windows.system.powershell.moduleanalysiscache/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.Powershell.ModuleAnalysisCache :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.powershell.moduleanalysiscache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.powershell.moduleanalysiscache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -145,4 +145,4 @@
          })
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.powershell.psreadline/index.html b/artifact_references/pages/windows.system.powershell.psreadline/index.html
index ec14b92aa99..9a2d8d133bb 100644
--- a/artifact_references/pages/windows.system.powershell.psreadline/index.html
+++ b/artifact_references/pages/windows.system.powershell.psreadline/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.Powershell.PSReadline :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.powershell.psreadline/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.powershell.psreadline/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -153,4 +153,4 @@
                 FROM targets
             })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.powershell/index.html b/artifact_references/pages/windows.system.powershell/index.html
index 1e00d2f9944..2d50e33cd30 100644
--- a/artifact_references/pages/windows.system.powershell/index.html
+++ b/artifact_references/pages/windows.system.powershell/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.PowerShell :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.powershell/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.powershell/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -134,4 +134,4 @@
         base64encode(string=utf16_encode(string=Command))
       ])
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.pslist/index.html b/artifact_references/pages/windows.system.pslist/index.html
index 240ea931059..fa804d2e23d 100644
--- a/artifact_references/pages/windows.system.pslist/index.html
+++ b/artifact_references/pages/windows.system.pslist/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.Pslist :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.pslist/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.pslist/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -125,4 +125,4 @@
                         then= Authenticode.Trusted = 'trusted' OR NOT Exe,
                         else= False )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.rootcastore/index.html b/artifact_references/pages/windows.system.rootcastore/index.html
index f2a05c3a091..875d3d58c41 100644
--- a/artifact_references/pages/windows.system.rootcastore/index.html
+++ b/artifact_references/pages/windows.system.rootcastore/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.RootCAStore :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.rootcastore/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.rootcastore/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -140,4 +140,4 @@
           FROM glob(globs=Glob, accessor=Accessor)
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.services/index.html b/artifact_references/pages/windows.system.services/index.html
index 1c52c3c0d98..382bbc3969a 100644
--- a/artifact_references/pages/windows.system.services/index.html
+++ b/artifact_references/pages/windows.system.services/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.Services :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.services/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.services/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -176,4 +176,4 @@
                     then=authenticode(filename=ServiceDll || " ")) AS CertinfoServiceDll
       FROM service
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.shares/index.html b/artifact_references/pages/windows.system.shares/index.html
index 630a6994a7b..afb589ed9a8 100644
--- a/artifact_references/pages/windows.system.shares/index.html
+++ b/artifact_references/pages/windows.system.shares/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.Shares :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.shares/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.shares/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -95,4 +95,4 @@
         SELECT Name, Path, Caption, Status,MaximumAllowed,AllowMaximum,InstallDate
         FROM wmi(query='SELECT * FROM Win32_Share',namespace='root/cimv2')
         WHERE Name =~ NameRegex AND Path =~ PathRegex
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.signers/index.html b/artifact_references/pages/windows.system.signers/index.html
index 96aed4d8205..6cb9256c0b0 100644
--- a/artifact_references/pages/windows.system.signers/index.html
+++ b/artifact_references/pages/windows.system.signers/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.Signers :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.signers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.signers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -100,4 +100,4 @@
             ORDER BY Count DESC
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.svchost/index.html b/artifact_references/pages/windows.system.svchost/index.html
index 9f0aaaf9a8a..fe92706df6e 100644
--- a/artifact_references/pages/windows.system.svchost/index.html
+++ b/artifact_references/pages/windows.system.svchost/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.SVCHost :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.svchost/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.svchost/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -112,4 +112,4 @@
               WHERE Pid=SVCHostPpid
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.taskscheduler/index.html b/artifact_references/pages/windows.system.taskscheduler/index.html
index c2c3218bca3..ebce999fd81 100644
--- a/artifact_references/pages/windows.system.taskscheduler/index.html
+++ b/artifact_references/pages/windows.system.taskscheduler/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.TaskScheduler :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.taskscheduler/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.taskscheduler/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -121,4 +121,4 @@
             XML as _XML
         FROM foreach(row=Uploads, query=parse_task)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.untrustedbinaries/index.html b/artifact_references/pages/windows.system.untrustedbinaries/index.html
index 5da4c740e4b..cbe6db75a5a 100644
--- a/artifact_references/pages/windows.system.untrustedbinaries/index.html
+++ b/artifact_references/pages/windows.system.untrustedbinaries/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.UntrustedBinaries :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.untrustedbinaries/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.untrustedbinaries/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -115,4 +115,4 @@
                Authenticode.SubjectName as Subject,
                Authenticode.Trusted as Trusted from auth
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.vad/index.html b/artifact_references/pages/windows.system.vad/index.html
index 62fc6dff09c..514c60513f4 100644
--- a/artifact_references/pages/windows.system.vad/index.html
+++ b/artifact_references/pages/windows.system.vad/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.VAD :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.vad/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.vad/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -227,4 +227,4 @@
   - name: HitContext
     type: preview_upload
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.vbscript/index.html b/artifact_references/pages/windows.system.vbscript/index.html
index e9442c4a184..e22e2c98f4c 100644
--- a/artifact_references/pages/windows.system.vbscript/index.html
+++ b/artifact_references/pages/windows.system.vbscript/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.VBScript :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.vbscript/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.vbscript/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -107,4 +107,4 @@
  
       SELECT Stdout 
       FROM execve(argv=['cscript.exe','//NoLogo','/E:vbs',temp_script], sep='\n')
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.system.wmiquery/index.html b/artifact_references/pages/windows.system.wmiquery/index.html
index 05863db52f7..d88874853fa 100644
--- a/artifact_references/pages/windows.system.wmiquery/index.html
+++ b/artifact_references/pages/windows.system.wmiquery/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.WMIQuery :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.wmiquery/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.system.wmiquery/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -114,4 +114,4 @@
     query: |
        SELECT * FROM wmi(namespace=Namespace,query=WMIQuery)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.timeline.mft/index.html b/artifact_references/pages/windows.timeline.mft/index.html
index 6c208690be8..0fc8cbc699d 100644
--- a/artifact_references/pages/windows.timeline.mft/index.html
+++ b/artifact_references/pages/windows.timeline.mft/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Timeline.MFT :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.timeline.mft/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.timeline.mft/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -299,4 +299,4 @@
                     })
             })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.timeline.prefetch/index.html b/artifact_references/pages/windows.timeline.prefetch/index.html
index 6f9fda8dfda..30d9ebae5c0 100644
--- a/artifact_references/pages/windows.timeline.prefetch/index.html
+++ b/artifact_references/pages/windows.timeline.prefetch/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Timeline.Prefetch :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.timeline.prefetch/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.timeline.prefetch/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -182,4 +182,4 @@
       })
       ORDER BY event_time
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.timeline.registry.runmru/index.html b/artifact_references/pages/windows.timeline.registry.runmru/index.html
index dce994da619..abc0360b48c 100644
--- a/artifact_references/pages/windows.timeline.registry.runmru/index.html
+++ b/artifact_references/pages/windows.timeline.registry.runmru/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Timeline.Registry.RunMRU :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.timeline.registry.runmru/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.timeline.registry.runmru/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -212,4 +212,4 @@
             else={ SELECT * FROM splitOut})
         WHERE if(condition=regexValue, then=message =~ regexValue, else=TRUE)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.triage.processmemory/index.html b/artifact_references/pages/windows.triage.processmemory/index.html
index 35a4584ff7f..2c9267051a2 100644
--- a/artifact_references/pages/windows.triage.processmemory/index.html
+++ b/artifact_references/pages/windows.triage.processmemory/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Triage.ProcessMemory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.triage.processmemory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.triage.processmemory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -94,4 +94,4 @@
             FROM proc_dump(pid=Pid)
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/artifact_references/pages/windows.triage.sds/index.html b/artifact_references/pages/windows.triage.sds/index.html
index e63f2a6c571..53107a82750 100644
--- a/artifact_references/pages/windows.triage.sds/index.html
+++ b/artifact_references/pages/windows.triage.sds/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Triage.SDS :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.triage.sds/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/artifact_references/pages/windows.triage.sds/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -100,4 +100,4 @@
       FROM foreach(row=parse_ntfs(device=Device, mft=9).Attributes, column="_value")
       WHERE Name =~ "\\$S" AND TypeId IN (128, 160)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2019/2019-03-02/index.html b/blog/2019/2019-03-02/index.html
index 82e13616f44..914d6bb799a 100644
--- a/blog/2019/2019-03-02/index.html
+++ b/blog/2019/2019-03-02/index.html
@@ -4,7 +4,7 @@
 permanently on the end point, but rather push it to end points
 temporarily to collect specific artifacts.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Agentless hunting with Velociraptor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/2019-03-02/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/2019-03-02/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -140,4 +140,4 @@
   writeback_windows: $TEMP\\velociraptor.writeback.yaml
 </code></pre><p>The file will remain in the client's temp directory so if you ever
 decide to run the agentless client again (by pushing another group
-policy) the client id remains the same.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+policy) the client id remains the same.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2019/2019-09-11_velociraptor-s-client-side-buffer-3ce03697a4e6/index.html b/blog/2019/2019-09-11_velociraptor-s-client-side-buffer-3ce03697a4e6/index.html
index 549015bc225..bff9eb35eb4 100644
--- a/blog/2019/2019-09-11_velociraptor-s-client-side-buffer-3ce03697a4e6/index.html
+++ b/blog/2019/2019-09-11_velociraptor-s-client-side-buffer-3ce03697a4e6/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="The recent velociraptor release features a client side buffer. What does this do and how does it change the incident response field?"><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor’s client side buffer :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/2019-09-11_velociraptor-s-client-side-buffer-3ce03697a4e6/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/2019-09-11_velociraptor-s-client-side-buffer-3ce03697a4e6/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=top-github-link><a class=github-link title='Edit this page' href=https://github.com/Velocidex/velociraptor-docs/edit/master/content/blog/2019/2019-09-11_velociraptor-s-client-side-buffer-3ce03697a4e6/_index.md target=blank><i class="fas fa-code-branch"></i>
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>Velociraptor’s client side buffer</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><ul><li></li><li><a href=#what-is-a-localbuffer>What is a local buffer?</a></li><li><a href=#what-does-a-buffer-file-allows-us-todo>What does a buffer file allows us to do?</a></li><li><a href=#event-monitoring-queries>Event Monitoring queries</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Velociraptor’s client side buffer</h1><h4 id=by-mike-cohen>By Mike Cohen</h4><p><img src=../../img/1__SLf0Z8PXOXTWfjXyuTk__Xg.png alt></p><p>The recent <a href=https://www.velocidex.com/>Velociraptor</a> <a href=https://github.com/Velocidex/velociraptor/releases>release</a> (0.3.3) features a client side buffer. What does this do and how does it change Velociraptor’s approach to incident response?</p><h3 id=what-is-a-localbuffer>What is a local buffer?</h3><p>The Velociraptor client is really just a (Velociraptor Query Language) VQL execution engine. When collecting an artifact, the client running on the endpoint, simply executes the VQL and streams rows from the query to the server as they occur.</p><p>Previously the client would attempt to upload the rows periodically to the server, and while this upload was taking place, the VQL query was paused. If the server was unavailable (for example if the endpoint was not on the internet), the VQL query simply paused until the rows could be sent.</p><p>In the recent 0.3.3 release we introduced a local file buffer between the execution engine and the server communication thread. Now the Velociraptor client’s VQL engine operates independently of the communication thread, and is not paused if the server is not reachable. This is illustrated in the diagram below:</p><p><img src=../../img/1__6BhCwfeFhoO0Jf4UP3g25Q.png alt></p><p>By default the file on disk is allowed to grow to 1GB in size, but usually it is truncated to zero bytes if the client is online and communicating with the server.</p><h3 id=what-does-a-buffer-file-allows-us-todo>What does a buffer file allows us to do?</h3><p>Using a file on disk allows us to run the VQL query as quickly as possible. For example, some artifacts require collection of many files. Since network traffic is typically much slower than disk activity, previously we were only able to collect data at the speed at which we could send it on the network. An artifact collection could take quite some hours if there was a lot of data to upload and a slow network link.</p><p>With the new system we are allowed to buffer up to 1GB of data (which also includes uploaded files) before we have to pause the query. This allows many artifacts to completely finished — even if the client is not online. Later when then client resumes connection with the server, that data can be uploaded over time — even if the network is very slow.</p><h3 id=event-monitoring-queries>Event Monitoring queries</h3><p>One of the differences between Velociraptor and other tools is that VQL queries allow us to build a complete monitoring and response framework.</p><p>Typically EDR tools deploy sensors which collect data and feed it to a back-end system. Processes on the back-end system detect anomalous activity and respond to this either by gather more information or alerting. This long latency round trip between detection and response delays the response activity and is only possible when the client is connected and online.</p><p>With the recent Velociraptor release, we can deploy monitoring VQL artifacts which simply watch the endpoint for certain events. These events can then be automatically acted upon — typically to implement response actions (e.g. kill a bad process) or to enrich the event information collected (e.g. acquire extra hashes or the binaries of suspicious files).</p><p>Because the file buffer allows the VQL engine to operate even when the client is not online, VQL event monitoring queries are not interrupted and continue to work autonomously without involvement from the server.</p><h4 id=example-office-macros-on-thumbdrive>Example: Office macros on thumb drive</h4><p>An example of an event monitoring artifact is the <strong>Windows.Detection.Thumbdrives.List</strong> artifact. This artifact watches for any newly inserted USB thumb drive and simply lists the files on it. In some environments it is interesting to see any newly added files on a USB removable drive.</p><p><figure><img src=../../img/0__nPIixkbpqm__LNbv2.jpg alt="The Windows.Detection.Thumbdrives.List artifact watches for newly added removable drives and reports new files added to them." class=captioned><figcaption>The Windows.Detection.Thumbdrives.List artifact watches for newly added removable drives and reports new files added to them.</figcaption></figure>The Windows.Detection.Thumbdrives.List artifact watches for newly added removable drives and reports new files added to them.</p><p>Previously, when a thumb drive was added, Velociraptor sent the file listing to the server immediately. However, if the endpoint was offline, this data blocked further monitoring by the query.</p><p>Starting with the 0.3.3 release, Velociraptor will now queue the messages in its local file buffer immediately, and transfer the data to the server when it can — even if it is currently not on the internet or online. The messages will simply be forwarded to the server at a later time.</p><h4 id=conclusions>Conclusions</h4><p>This feature allows Velociraptor to monitor the end point without being connected to the server at all. In effect this implements a <strong>response plan</strong>: The endpoint is given a plan of what to do in the case certain events occur (in the form of monitoring VQL queries) and can implement this plan autonomously without needing to contact the server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<span class=links>Velociraptor’s client side buffer</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><ul><li></li><li><a href=#what-is-a-localbuffer>What is a local buffer?</a></li><li><a href=#what-does-a-buffer-file-allows-us-todo>What does a buffer file allows us to do?</a></li><li><a href=#event-monitoring-queries>Event Monitoring queries</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Velociraptor’s client side buffer</h1><h4 id=by-mike-cohen>By Mike Cohen</h4><p><img src=../../img/1__SLf0Z8PXOXTWfjXyuTk__Xg.png alt></p><p>The recent <a href=https://www.velocidex.com/>Velociraptor</a> <a href=https://github.com/Velocidex/velociraptor/releases>release</a> (0.3.3) features a client side buffer. What does this do and how does it change Velociraptor’s approach to incident response?</p><h3 id=what-is-a-localbuffer>What is a local buffer?</h3><p>The Velociraptor client is really just a (Velociraptor Query Language) VQL execution engine. When collecting an artifact, the client running on the endpoint, simply executes the VQL and streams rows from the query to the server as they occur.</p><p>Previously the client would attempt to upload the rows periodically to the server, and while this upload was taking place, the VQL query was paused. If the server was unavailable (for example if the endpoint was not on the internet), the VQL query simply paused until the rows could be sent.</p><p>In the recent 0.3.3 release we introduced a local file buffer between the execution engine and the server communication thread. Now the Velociraptor client’s VQL engine operates independently of the communication thread, and is not paused if the server is not reachable. This is illustrated in the diagram below:</p><p><img src=../../img/1__6BhCwfeFhoO0Jf4UP3g25Q.png alt></p><p>By default the file on disk is allowed to grow to 1GB in size, but usually it is truncated to zero bytes if the client is online and communicating with the server.</p><h3 id=what-does-a-buffer-file-allows-us-todo>What does a buffer file allows us to do?</h3><p>Using a file on disk allows us to run the VQL query as quickly as possible. For example, some artifacts require collection of many files. Since network traffic is typically much slower than disk activity, previously we were only able to collect data at the speed at which we could send it on the network. An artifact collection could take quite some hours if there was a lot of data to upload and a slow network link.</p><p>With the new system we are allowed to buffer up to 1GB of data (which also includes uploaded files) before we have to pause the query. This allows many artifacts to completely finished — even if the client is not online. Later when then client resumes connection with the server, that data can be uploaded over time — even if the network is very slow.</p><h3 id=event-monitoring-queries>Event Monitoring queries</h3><p>One of the differences between Velociraptor and other tools is that VQL queries allow us to build a complete monitoring and response framework.</p><p>Typically EDR tools deploy sensors which collect data and feed it to a back-end system. Processes on the back-end system detect anomalous activity and respond to this either by gather more information or alerting. This long latency round trip between detection and response delays the response activity and is only possible when the client is connected and online.</p><p>With the recent Velociraptor release, we can deploy monitoring VQL artifacts which simply watch the endpoint for certain events. These events can then be automatically acted upon — typically to implement response actions (e.g. kill a bad process) or to enrich the event information collected (e.g. acquire extra hashes or the binaries of suspicious files).</p><p>Because the file buffer allows the VQL engine to operate even when the client is not online, VQL event monitoring queries are not interrupted and continue to work autonomously without involvement from the server.</p><h4 id=example-office-macros-on-thumbdrive>Example: Office macros on thumb drive</h4><p>An example of an event monitoring artifact is the <strong>Windows.Detection.Thumbdrives.List</strong> artifact. This artifact watches for any newly inserted USB thumb drive and simply lists the files on it. In some environments it is interesting to see any newly added files on a USB removable drive.</p><p><figure><img src=../../img/0__nPIixkbpqm__LNbv2.jpg alt="The Windows.Detection.Thumbdrives.List artifact watches for newly added removable drives and reports new files added to them." class=captioned><figcaption>The Windows.Detection.Thumbdrives.List artifact watches for newly added removable drives and reports new files added to them.</figcaption></figure>The Windows.Detection.Thumbdrives.List artifact watches for newly added removable drives and reports new files added to them.</p><p>Previously, when a thumb drive was added, Velociraptor sent the file listing to the server immediately. However, if the endpoint was offline, this data blocked further monitoring by the query.</p><p>Starting with the 0.3.3 release, Velociraptor will now queue the messages in its local file buffer immediately, and transfer the data to the server when it can — even if it is currently not on the internet or online. The messages will simply be forwarded to the server at a later time.</p><h4 id=conclusions>Conclusions</h4><p>This feature allows Velociraptor to monitor the end point without being connected to the server at all. In effect this implements a <strong>response plan</strong>: The endpoint is given a plan of what to do in the case certain events occur (in the form of monitoring VQL queries) and can implement this plan autonomously without needing to contact the server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2019/2019-10-02_triage-with-velociraptor-pt-1-253f57ce96c0/index.html b/blog/2019/2019-10-02_triage-with-velociraptor-pt-1-253f57ce96c0/index.html
index c885ea4ca01..d19cd82234e 100644
--- a/blog/2019/2019-10-02_triage-with-velociraptor-pt-1-253f57ce96c0/index.html
+++ b/blog/2019/2019-10-02_triage-with-velociraptor-pt-1-253f57ce96c0/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Collecting files for fun and profit"><link rel=icon href=/images/favicon.png type=image/png><title>Triage with Velociraptor — Pt 1 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/2019-10-02_triage-with-velociraptor-pt-1-253f57ce96c0/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/2019-10-02_triage-with-velociraptor-pt-1-253f57ce96c0/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=top-github-link><a class=github-link title='Edit this page' href=https://github.com/Velocidex/velociraptor-docs/edit/master/content/blog/2019/2019-10-02_triage-with-velociraptor-pt-1-253f57ce96c0/_index.md target=blank><i class="fas fa-code-branch"></i>
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>Triage with Velociraptor — Pt 1</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><ul><li></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Triage with Velociraptor — Pt 1</h1><h4 id=by-mike-cohen>By Mike Cohen</h4><p><img src=../../img/1__8JNwZw22dHvjNnRAKqFz2g.jpeg alt></p><p>This is part 1 of the 3 part series focused around triaging and file collection.</p><p>Traditionally digital forensic practitioners and incident responders collected disk images to retain evidence in cases of compromise. However in recent times, the size of investigations and the short time frames required, started a trend of more selective evidence collection. Instead of collecting the entire disk, responders now prefer to collect only critical files allowing more rapid triage.</p><p>However, which files should we collect? Knowing which files to collect and what to do with them was previously reserved for DFIR experts. These days, we have some excellent public resources for this. The best resource for windows systems is probably the <a href=https://github.com/EricZimmerman/KapeFiles>KapeFiles</a> repository. This is a public repository maintaining a set of <a href=https://ericzimmerman.github.io/KapeDocs/#!index.md>Kape</a> configuration files. Kape is an excellent tool geared at file collection — simply acquiring various files of interest from a system for triage purposes.</p><p>Although Kape itself is not open source, the KapeFiles repository is a community project available under the MIT license. It therefore seemed like a perfect way to leverage the specialist DFIR knowledge from the community and develop a useful Velociraptor artifact based on this knowledge.</p><p>This article outlines this new artifact and how it can be used to collect triaged files quickly and efficiently.</p><h4 id=the-kapefiles-repository>The KapeFiles repository</h4><p>Kape parses a set of <strong>Target</strong> files (with <strong>.tkape</strong> extension). These files essentially specify a set of file globs (i.e. paths with wild cards) specifying files to collect. Kape also supports targets referring to other targets thereby expressing higher level targets in terms of lower level targets. For example selecting the <strong>WebBrowsers.tkape</strong> target, will include all glob expressions specified in <strong>Chrome.tkape, FileFox,tkape</strong> etc.</p><p>When using Kape to collect files, the user specifies one or more <strong>Targets</strong> which are then collected into a directory, or some container (e.g. Zip file).</p><p>Previous versions of velociraptor added several VQL artifact definitions based on the KapeFiles repository, but these were hand written and difficult to maintain in sync with the public contributions to the KapeFiles repository.</p><p>Since <a href=https://github.com/Velocidex/velociraptor/releases/tag/v0.3.4>release 0.3.4,</a> Velociraptor has a script that automatically parses out Kape target files and generates a Velociraptor artifact with the same targets and globs — thereby creating a functionally equivalent artifact to the KapeFiles repository.</p><h4 id=collecting-files-from-theendpoint>Collecting files from the endpoint</h4><p>To collect files, simply select the <strong>Windows.KapeFiles.Targets</strong> artifact from the <strong>Collected Artifacts</strong> screen in the GUI. After adding the artifact to our collection (by clicking <strong>Add</strong>) we see a list of targets with check boxes next to them. Each target may invoke several rules (and therefore collect different files), but the dependencies are listed next to the target.</p><p><figure><img src=../../img/1__9OLhR0z9EbEPbIBY9Dv3aQ.png alt="Selecting the Windows.KapeFiles.Targets artifact for collection on an endpoint." class=captioned><figcaption>Selecting the Windows.KapeFiles.Targets artifact for collection on an endpoint.</figcaption></figure>Selecting the Windows.KapeFiles.Targets artifact for collection on an endpoint.</p><p>Selecting one or more targets will collect those files from the endpoint to the Velociraptor server. Once the files are fully collected to the server, you can download them as a zip file on demand by clicking the “Prepare Download” button.</p><p><img src=../../img/1__T7To9XETRYO3R7jP__U1mSg.png alt></p><p>When the collection is complete, we can click the <em>“Prepare Download”</em> button which will prepare a Zip file on the server for us to download.</p><h4 id=triaging-asystem>Triaging a system</h4><p>What can we use this for? Suppose you suspect a compromise. It is imperative to preserve as much of the evidence as possible, as quickly as possible.</p><p>Running the Kape target <strong>BasicCollection</strong> will collect a lot of interesting files, including the <strong>$MFT</strong>, <strong>event logs</strong>, <strong>prefetch</strong>, <strong>amcache</strong> among many other files. This helps us to preserve as much of the state of the system as we think will be relevant for our investigation in future.</p><p>Depending on the total amount of data collected we may also issue this collection on one or more machines. Triaging will capture and preserve the evidence. We can then parse it with other tools externally and just keep the snapshot.</p><h4 id=what-if-velociraptor-is-not-installed-on-our-endpoints>What if Velociraptor is not installed on our endpoints?</h4><p>If Velociraptor is not installed on the endpoint, we have a number of options:</p><ol><li><a href=https://www.velocidex.com/docs/getting-started/deploying_clients/>Install it</a> using group policy</li><li>Temporarily run it using group policy scheduled tasks (so called <a href=https://www.velocidex.com/docs/getting-started/deploying_clients/#agentless-deployment>Agentless mode</a>)</li><li>Interactively collect triaging files by running in interactive mode.</li></ol><p>The <a href="https://medium.com/velociraptor-ir/triage-with-velociraptor-pt-2-d0f79066ca0e?source=friends_link&amp;sk=b3b902227634160e0f9703338fb25586">next part</a> of this series will discuss how to interactively collect triage files while physically (or remotely) logging into the machine.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<span class=links>Triage with Velociraptor — Pt 1</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><ul><li></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Triage with Velociraptor — Pt 1</h1><h4 id=by-mike-cohen>By Mike Cohen</h4><p><img src=../../img/1__8JNwZw22dHvjNnRAKqFz2g.jpeg alt></p><p>This is part 1 of the 3 part series focused around triaging and file collection.</p><p>Traditionally digital forensic practitioners and incident responders collected disk images to retain evidence in cases of compromise. However in recent times, the size of investigations and the short time frames required, started a trend of more selective evidence collection. Instead of collecting the entire disk, responders now prefer to collect only critical files allowing more rapid triage.</p><p>However, which files should we collect? Knowing which files to collect and what to do with them was previously reserved for DFIR experts. These days, we have some excellent public resources for this. The best resource for windows systems is probably the <a href=https://github.com/EricZimmerman/KapeFiles>KapeFiles</a> repository. This is a public repository maintaining a set of <a href=https://ericzimmerman.github.io/KapeDocs/#!index.md>Kape</a> configuration files. Kape is an excellent tool geared at file collection — simply acquiring various files of interest from a system for triage purposes.</p><p>Although Kape itself is not open source, the KapeFiles repository is a community project available under the MIT license. It therefore seemed like a perfect way to leverage the specialist DFIR knowledge from the community and develop a useful Velociraptor artifact based on this knowledge.</p><p>This article outlines this new artifact and how it can be used to collect triaged files quickly and efficiently.</p><h4 id=the-kapefiles-repository>The KapeFiles repository</h4><p>Kape parses a set of <strong>Target</strong> files (with <strong>.tkape</strong> extension). These files essentially specify a set of file globs (i.e. paths with wild cards) specifying files to collect. Kape also supports targets referring to other targets thereby expressing higher level targets in terms of lower level targets. For example selecting the <strong>WebBrowsers.tkape</strong> target, will include all glob expressions specified in <strong>Chrome.tkape, FileFox,tkape</strong> etc.</p><p>When using Kape to collect files, the user specifies one or more <strong>Targets</strong> which are then collected into a directory, or some container (e.g. Zip file).</p><p>Previous versions of velociraptor added several VQL artifact definitions based on the KapeFiles repository, but these were hand written and difficult to maintain in sync with the public contributions to the KapeFiles repository.</p><p>Since <a href=https://github.com/Velocidex/velociraptor/releases/tag/v0.3.4>release 0.3.4,</a> Velociraptor has a script that automatically parses out Kape target files and generates a Velociraptor artifact with the same targets and globs — thereby creating a functionally equivalent artifact to the KapeFiles repository.</p><h4 id=collecting-files-from-theendpoint>Collecting files from the endpoint</h4><p>To collect files, simply select the <strong>Windows.KapeFiles.Targets</strong> artifact from the <strong>Collected Artifacts</strong> screen in the GUI. After adding the artifact to our collection (by clicking <strong>Add</strong>) we see a list of targets with check boxes next to them. Each target may invoke several rules (and therefore collect different files), but the dependencies are listed next to the target.</p><p><figure><img src=../../img/1__9OLhR0z9EbEPbIBY9Dv3aQ.png alt="Selecting the Windows.KapeFiles.Targets artifact for collection on an endpoint." class=captioned><figcaption>Selecting the Windows.KapeFiles.Targets artifact for collection on an endpoint.</figcaption></figure>Selecting the Windows.KapeFiles.Targets artifact for collection on an endpoint.</p><p>Selecting one or more targets will collect those files from the endpoint to the Velociraptor server. Once the files are fully collected to the server, you can download them as a zip file on demand by clicking the “Prepare Download” button.</p><p><img src=../../img/1__T7To9XETRYO3R7jP__U1mSg.png alt></p><p>When the collection is complete, we can click the <em>“Prepare Download”</em> button which will prepare a Zip file on the server for us to download.</p><h4 id=triaging-asystem>Triaging a system</h4><p>What can we use this for? Suppose you suspect a compromise. It is imperative to preserve as much of the evidence as possible, as quickly as possible.</p><p>Running the Kape target <strong>BasicCollection</strong> will collect a lot of interesting files, including the <strong>$MFT</strong>, <strong>event logs</strong>, <strong>prefetch</strong>, <strong>amcache</strong> among many other files. This helps us to preserve as much of the state of the system as we think will be relevant for our investigation in future.</p><p>Depending on the total amount of data collected we may also issue this collection on one or more machines. Triaging will capture and preserve the evidence. We can then parse it with other tools externally and just keep the snapshot.</p><h4 id=what-if-velociraptor-is-not-installed-on-our-endpoints>What if Velociraptor is not installed on our endpoints?</h4><p>If Velociraptor is not installed on the endpoint, we have a number of options:</p><ol><li><a href=https://www.velocidex.com/docs/getting-started/deploying_clients/>Install it</a> using group policy</li><li>Temporarily run it using group policy scheduled tasks (so called <a href=https://www.velocidex.com/docs/getting-started/deploying_clients/#agentless-deployment>Agentless mode</a>)</li><li>Interactively collect triaging files by running in interactive mode.</li></ol><p>The <a href="https://medium.com/velociraptor-ir/triage-with-velociraptor-pt-2-d0f79066ca0e?source=friends_link&amp;sk=b3b902227634160e0f9703338fb25586">next part</a> of this series will discuss how to interactively collect triage files while physically (or remotely) logging into the machine.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2019/2019-10-04_triage-with-velociraptor-pt-2-d0f79066ca0e/index.html b/blog/2019/2019-10-04_triage-with-velociraptor-pt-2-d0f79066ca0e/index.html
index b1684249e25..78e5066bb9c 100644
--- a/blog/2019/2019-10-04_triage-with-velociraptor-pt-2-d0f79066ca0e/index.html
+++ b/blog/2019/2019-10-04_triage-with-velociraptor-pt-2-d0f79066ca0e/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Help others to collect files …"><link rel=icon href=/images/favicon.png type=image/png><title>Triage with Velociraptor — Pt 2 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/2019-10-04_triage-with-velociraptor-pt-2-d0f79066ca0e/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/2019-10-04_triage-with-velociraptor-pt-2-d0f79066ca0e/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -85,4 +85,4 @@
          &quot;--args&quot;, &quot;MOF=Y&quot;,
          &quot;--args&quot;, &quot;VSSAnalysis=Y&quot;\]
 </code></pre><p>Note that this config file invokes Velociraptor with a list of KapeFiles targets and instructs the result to be saved to a zip file named after the computer name.</p><p>Next we simply repack the binary — this effectively copies the config file inside the binary so when the new binary restarts, it automatically loads this config file (and therefore runs the instructions above):</p><pre><code>F:&gt; velociraptor.exe config repack myconfig.yaml my\_velo.exe
-</code></pre><p>This will produce a new binary with our config embedded in it. Now when this binary is run it will immediately begin to collect the targets listed. Note that the collector needs to run as an administrator so typically the user will need to right click, select “Run As Administrator” and click through the UAC dialog:</p><p><img src=../../img/1__qfSv52u3RLwpoOBqSz1lCg.png alt></p><p>When complete Velociraptor will leave behind the zip file with all the files in it — ready for sharing with the investigator.</p><h4 id=uploading-the-collection>Uploading the collection</h4><p>All we need to do now is send our trusted user the repacked binary and instruct them to right click on it and run as administrator. The collected zip file can be large (several Gb) and the user would need to somehow transport the file to us. One way is for us to set up a public writable share and have the file written automatically via a UNC path. This method only works when users are on the corporate LAN and have access to the domain and the file share. Otherwise the user may upload the file manually for us.</p><p>In the next part we will see how to write the collected zip file to a cloud server instead so they can automatically upload the collected files from any internet connected network.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><p>This will produce a new binary with our config embedded in it. Now when this binary is run it will immediately begin to collect the targets listed. Note that the collector needs to run as an administrator so typically the user will need to right click, select “Run As Administrator” and click through the UAC dialog:</p><p><img src=../../img/1__qfSv52u3RLwpoOBqSz1lCg.png alt></p><p>When complete Velociraptor will leave behind the zip file with all the files in it — ready for sharing with the investigator.</p><h4 id=uploading-the-collection>Uploading the collection</h4><p>All we need to do now is send our trusted user the repacked binary and instruct them to right click on it and run as administrator. The collected zip file can be large (several Gb) and the user would need to somehow transport the file to us. One way is for us to set up a public writable share and have the file written automatically via a UNC path. This method only works when users are on the corporate LAN and have access to the domain and the file share. Otherwise the user may upload the file manually for us.</p><p>In the next part we will see how to write the collected zip file to a cloud server instead so they can automatically upload the collected files from any internet connected network.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2019/2019-10-08_triage-with-velociraptor-pt-3-d6f63215f579/index.html b/blog/2019/2019-10-08_triage-with-velociraptor-pt-3-d6f63215f579/index.html
index e3c4a6dc0c3..6c6a6f336aa 100644
--- a/blog/2019/2019-10-08_triage-with-velociraptor-pt-3-d6f63215f579/index.html
+++ b/blog/2019/2019-10-08_triage-with-velociraptor-pt-3-d6f63215f579/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Collecting files to the cloud…"><link rel=icon href=/images/favicon.png type=image/png><title>Triage with Velociraptor — Pt 3 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/2019-10-08_triage-with-velociraptor-pt-3-d6f63215f579/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/2019-10-08_triage-with-velociraptor-pt-3-d6f63215f579/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -132,4 +132,4 @@
 is always available on the endpoint, it does not have to be used in
 this way. The key strength of Velociraptor is its flexibility and
 ability to adapt to any situation through the use of the powerful
-Velociraptor Query Language (VQL).</p><p>Users who feel comfortable writing their own VQL can adapt Velociraptor easily to evolving situations and collect new artifacts quickly. Check out the official <a href=https://www.velocidex.com/docs/vql_reference/>VQL reference</a>, <a href=https://github.com/Velocidex/velociraptor>Download the latest version</a> of Velociraptor from GitHub and join the community of power users.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+Velociraptor Query Language (VQL).</p><p>Users who feel comfortable writing their own VQL can adapt Velociraptor easily to evolving situations and collect new artifacts quickly. Check out the official <a href=https://www.velocidex.com/docs/vql_reference/>VQL reference</a>, <a href=https://github.com/Velocidex/velociraptor>Download the latest version</a> of Velociraptor from GitHub and join the community of power users.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2019/2019-11-12_windows-event-logs-d8d8e615c9ca/index.html b/blog/2019/2019-11-12_windows-event-logs-d8d8e615c9ca/index.html
index ba2cf173ef0..4af448ec7f6 100644
--- a/blog/2019/2019-11-12_windows-event-logs-d8d8e615c9ca/index.html
+++ b/blog/2019/2019-11-12_windows-event-logs-d8d8e615c9ca/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="What do they mean?"><link rel=icon href=/images/favicon.png type=image/png><title>Windows Event Logs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/2019-11-12_windows-event-logs-d8d8e615c9ca/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/2019-11-12_windows-event-logs-d8d8e615c9ca/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -90,4 +90,4 @@
 project which allows collecting messages in a database so events can
 be matched up quickly and easily with their correct messages without
 requiring the original program that generated the message to be
-installed on the analyst system.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+installed on the analyst system.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2019/2019-11-15_recovering-deleted-ntfs-files-with-velociraptor-1fcf09855311/index.html b/blog/2019/2019-11-15_recovering-deleted-ntfs-files-with-velociraptor-1fcf09855311/index.html
index 46f589b4c87..541a6ec4eec 100644
--- a/blog/2019/2019-11-15_recovering-deleted-ntfs-files-with-velociraptor-1fcf09855311/index.html
+++ b/blog/2019/2019-11-15_recovering-deleted-ntfs-files-with-velociraptor-1fcf09855311/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Deep forensics on the endpoint"><link rel=icon href=/images/favicon.png type=image/png><title>Recovering deleted NTFS Files with Velociraptor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/2019-11-15_recovering-deleted-ntfs-files-with-velociraptor-1fcf09855311/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/2019-11-15_recovering-deleted-ntfs-files-with-velociraptor-1fcf09855311/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -73,4 +73,4 @@
 the endpoint, I can always cancel it by clicking the “Stop” button in
 the <strong>Collected Artifacts</strong> GUI. Velociraptor will immediately abort
 the query on the endpoint when the collection is cancelled in the GUI.</p><h4 id=viewing-theresults>Viewing the results</h4><p>We can view the results of the query by clicking the Results tab. We see a number of useful columns including the EntryNumber (i.e. the MFT ID we discussed before), the InUse column indicates if the file is still in use or deleted as well as the full path of the file stored at that MFT ID. Note that this artifact simply prints the file stored at each consecutive MFT entry — there are over 255,000 rows in our example! (Not shown are created and modified timestamps as well for each file)</p><p><img src=../../img/1__zKoK8jx__DiM17yhyDofLTQ.png alt></p><p>The Velociraptor GUI only displays the first 500 rows from each artifact in order to keep the GUI fast and responsive. Because this query returned over 250k rows, we would need to download the data and post-process it. The easiest way is to prepare a download package and download it from the provided link. The CSV file can then be extracted and processed with other tools (e.g. grep or a database).</p><p><img src=../../img/1__GWpawiYVVZxrUgkmD__moBg.png alt></p><h4 id=tweaking-thequery>Tweaking the query</h4><p>In this exercise we already know the name of the file we are after is <strong>secret.txt</strong> so we do not really need a complete dump of the entire MFT — we only want all the MFT entries with the filename containing the word “secret”. We can therefore customize the artifact by adding a VQL <strong>WHERE</strong> clause after the query to only send interesting rows to the server. We will add a new parameter <strong>FullPathRegex</strong> allowing the user to customize the filtering terms in the future (for example search for deletions in the Tasks directory).</p><p><img src=../../img/1__AQwNLywmhyRkWS4jwhzeow.png alt></p><p>Now we can collect the customized artifact specifying that only rows matching “secret” will be retrieved.</p><p><img src=../../img/1__yaJsmM9lSFeGU8xW__q5qmA.png alt></p><p>The result is similar to the full dump above but now only 5 rows are returned from the endpoint. This is much faster than getting all 130mb CSV file and post processing it (Collection time is less than 1 minute now). By refining the artifact we have made Velociraptor more surgical in its approach — only returning the data we really want</p><p><img src=../../img/1__hH7zhLQt__TK2JgWOVFvrDw.png alt></p><p>We can see in the above that the file is deleted (InUse is false) and its EntryNumber is 86474. We can use this to try and recover the file’s data by collecting the <strong>Windows.NTFS.Recover</strong> artifact for this MFT entry</p><p><img src=../../img/1__ndPT5EnGcAm5fJYaHmbcAg.png alt></p><p>The <strong>Windows.NTFS.Recover</strong> simply uploads to the server all NTFS streams belonging to the MFT entry specified. We can see both $FILE_NAME attributes (long and short names) and the $DATA attribute.</p><p><img src=../../img/1__OaIiPJRPjqFi75nqQ6pOZw.png alt></p><p>Since the file is deleted, the MFT Entry is not allocated and a new file may be written in this MFT entry at any time. Therefore the contents of the $DATA stream may be completely unrelated to the file we are looking for. We can use the content of the $FILE_NAME and $STANDARD_INFORMATION to double check the validity of the file and confirm it is the file we expect.</p><p>To view the file we simple prepare a download as before and use an archiving tool to open the ZIP file. We then extract the $DATA stream and confirm it is the file we expected.</p><p><img src=../../img/1__znDhPzuQ3Uy0hKkR0xPc7Q.png alt>
-<img src=../../img/1__Z__8h6SVkmkKVc6xSJlJtuA.png alt></p><h4 id=conclusions>Conclusions</h4><p>Velociraptor provides access to low level NTFS analysis techniques within VQL. This means we can build VQL artifacts to automate some of the low level analysis — such as the recovery of deleted files, and scanning the MFT for remnants of old deleted files.</p><p>There are two pieces of information we can gather from such low level analysis:</p><ol><li>The deleted file metadata is found in the unallocated MFT entry and includes the file’s creation and modification timestamps.</li><li>The data of the file may still exist on disk.</li></ol><p>In practice, MFT entries are reused pretty quickly and so there is a high chance that the old deleted entry will not remain. Additionally $DATA blocks may also be reused so it is likely that even if we identify a deleted file we may not be able to recover its data using this technique.</p><p>So in practice, we use the <strong>Windows.NTFS.MFT</strong> artifact to collect metadata about deleted files, even though we are usually not able to recover their data.</p><p>If the system has an SSD rather than a spinning disk we are unlikely to recover any deleted file’s data. This is because SSDs aggressively reclaim unused blocks and wipe the block so it can be remapped in the wear leveling pool [see <a href=https://blog.elcomsoft.com/2019/01/life-after-trim-using-factory-access-mode-for-imaging-ssd-drives/>here</a>].</p><p>Do you commonly use this technique in your investigations? Share your thoughts below.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<img src=../../img/1__Z__8h6SVkmkKVc6xSJlJtuA.png alt></p><h4 id=conclusions>Conclusions</h4><p>Velociraptor provides access to low level NTFS analysis techniques within VQL. This means we can build VQL artifacts to automate some of the low level analysis — such as the recovery of deleted files, and scanning the MFT for remnants of old deleted files.</p><p>There are two pieces of information we can gather from such low level analysis:</p><ol><li>The deleted file metadata is found in the unallocated MFT entry and includes the file’s creation and modification timestamps.</li><li>The data of the file may still exist on disk.</li></ol><p>In practice, MFT entries are reused pretty quickly and so there is a high chance that the old deleted entry will not remain. Additionally $DATA blocks may also be reused so it is likely that even if we identify a deleted file we may not be able to recover its data using this technique.</p><p>So in practice, we use the <strong>Windows.NTFS.MFT</strong> artifact to collect metadata about deleted files, even though we are usually not able to recover their data.</p><p>If the system has an SSD rather than a spinning disk we are unlikely to recover any deleted file’s data. This is because SSDs aggressively reclaim unused blocks and wipe the block so it can be remapped in the wear leveling pool [see <a href=https://blog.elcomsoft.com/2019/01/life-after-trim-using-factory-access-mode-for-imaging-ssd-drives/>here</a>].</p><p>Do you commonly use this technique in your investigations? Share your thoughts below.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2019/2019-12-08-velociraptor-to-elasticsearch-3a9fc02c6568/index.html b/blog/2019/2019-12-08-velociraptor-to-elasticsearch-3a9fc02c6568/index.html
index 509e42d0212..54096e330f7 100644
--- a/blog/2019/2019-12-08-velociraptor-to-elasticsearch-3a9fc02c6568/index.html
+++ b/blog/2019/2019-12-08-velociraptor-to-elasticsearch-3a9fc02c6568/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Velociraptor to Elasticsearch"><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor to Elasticsearch :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/2019-12-08-velociraptor-to-elasticsearch-3a9fc02c6568/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/2019-12-08-velociraptor-to-elasticsearch-3a9fc02c6568/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -78,4 +78,4 @@
 as well as make use of existing organizational expertise in these
 tools. The data can furthermore be enriched, combined and correlated
 with data from a wide variety of security tools that make use of
-Elastic as a data backend.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+Elastic as a data backend.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2019/2019-12-31_digging-into-the-system-resource-usage-monitor-srum-afbadb1a375/index.html b/blog/2019/2019-12-31_digging-into-the-system-resource-usage-monitor-srum-afbadb1a375/index.html
index 7ed75f4f081..e9afbfb60c9 100644
--- a/blog/2019/2019-12-31_digging-into-the-system-resource-usage-monitor-srum-afbadb1a375/index.html
+++ b/blog/2019/2019-12-31_digging-into-the-system-resource-usage-monitor-srum-afbadb1a375/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Uncovering history with Velociraptor"><link rel=icon href=/images/favicon.png type=image/png><title>Digging into the System Resource Usage Monitor (SRUM) :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/2019-12-31_digging-into-the-system-resource-usage-monitor-srum-afbadb1a375/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/2019-12-31_digging-into-the-system-resource-usage-monitor-srum-afbadb1a375/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=top-github-link><a class=github-link title='Edit this page' href=https://github.com/Velocidex/velociraptor-docs/edit/master/content/blog/2019/2019-12-31_digging-into-the-system-resource-usage-monitor-srum-afbadb1a375/_index.md target=blank><i class="fas fa-code-branch"></i>
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>Digging into the System Resource Usage Monitor (SRUM)</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#uncovering-history-with-velociraptor>Uncovering history with Velociraptor</a><ul><li></li><li><a href=#the-execution-stats-source>The Execution Stats source</a></li><li><a href=#application-resource-usage>Application Resource Usage</a></li></ul></li><li><a href=#hunting-the-srum-database>Hunting the SRUM database</a></li><li><a href=#conclusions>Conclusions</a></li><li><a href=#training>Training</a></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Digging into the System Resource Usage Monitor (SRUM)</h1><h2 id=uncovering-history-with-velociraptor>Uncovering history with Velociraptor</h2><h4 id=by-mike-cohen>By Mike Cohen</h4><p><img src=../../img/0_yFgW11ar3mogfljd.jpg alt></p><p>Commonly in many incident response scenarios we need to gather evidence of program executions. For example, a phishing email delivering malware was sent to a user — did the user click on it? Did the malware run? was the email forwarded to any other users?</p><p>One of the most useful sources of evidence of execution on Windows is the System Resource Usage Monitor (SRUM). It was first described by Yogesh Khatri in the seminal paper “<a href=https://www.sciencedirect.com/science/article/pii/S1742287615000031>Forensic implications of System Resource Usage Monitor (SRUM) data in Windows 8</a>”.</p><p>SRUM is a feature in modern Windows systems which collect statistics on execution of binaries. The information is stored in an Extensible Storage Engine (ESE) database. ESE is Microsoft’s proprietary single file database format, acting similarly to SQLite, as a default storage engine for many applications — including the SRUM database.</p><p>As from the <a href=https://github.com/Velocidex/velociraptor/releases/tag/v0.3.7>0.3.7 release of Velociraptor</a>, an ESE parser is built into the client, allowing VQL artifacts to directly query ESE databases. This opens up the exciting possibility of extracting and querying information from the SRUM database directly on the endpoint.</p><p>Although this post will not go into detail on SRUM itself (This is covered in detail <a href=https://www.sans.org/cyber-security-summit/archives/file/summit-archive-1492184583.pdf>elsewhere</a>), I will describe how Velociraptor’s SRUM artifact can be used to hunt efficiently across many thousands of endpoints to collect evidence relevant to DFIR investigations.</p><p>Have you ever noticed the windows task manager’s “App History” tab?</p><p><figure><img src=../../img/1_1t_puy5xiAPvR4XUosSQtg.png alt="The Task Manager App History tab" class=captioned><figcaption>The Task Manager App History tab</figcaption></figure><em>The Task Manager App History tab</em></p><p>This tab shows running counts of many applications, broken by user that ran them, including network traffic, and total CPU time. Where does the information come from?</p><p>It turns out that the SRUM database is stored within tables inside the ESE database at <em>%windir%\System32\sru\SRUDB.dat.</em></p><p>Let’s examine Velociraptor’s <strong>Windows.Forensics.SRUM</strong> artifact</p><p><img src=../../img/1_Ajiq0F2RaIoqhj8PnuoCvA.png alt></p><p>The artifact contains several sources — examining a different table within the SRUM ESE database. As can be seen, the ESE database is parsed using Velociraptor’s raw NTFS parser since it is usually locked while the system is running. The artifact allows filtering for a specific application name by regular expression.</p><p>The SRUM database actually contains many tables collecting different runtime telemetry. Some of these tables are not publicly documented but may still contain valuable information. It is worthwhile inspecting the raw database file using an external tool (e.g. <a href=https://www.nirsoft.net/utils/ese_database_view.html>Nirsoft **ESEDatabaseView</a>**). The <strong>Windows.Forensics.SRUM</strong> artifact will by default upload the raw ESE file to the server as well as parse it.</p><p>To demonstrate the artifact, I am now going to collect it from one of my endpoints.</p><p><img src=../../img/1_tQOsldVH7wYGPV56wr0xBA.png alt></p><p>I simply search for my endpoint in the GUI, then click* “Collect More Artifacts” *and search for <strong>SRUM</strong> in the search box. I then add this artifact and click “<strong>Next</strong>” to launch it.</p><p><img src=../../img/1_WimaboQJfGvgXKNY6HeCEQ.png alt></p><p>The above shows that the endpoint took around 80 seconds to collect the entire artifact. This includes uploading the 28MB SRUM database, parsing some of the tables in it, and uploading the parsed results.</p><p><img src=../../img/1_fG5W7kOMtrmnB3mnGuWyeQ.png alt></p><p>Viewing the logs generated by the executing query give an indication of how the query is progressing.</p><h3 id=the-execution-stats-source>The Execution Stats source</h3><p>Let&rsquo;s inspect a sample from the “Execution Stats” source</p><p><img src=../../img/1_3lM3jXI47Z1eDQVjoLSfYQ.png alt></p><p>We get some interesting information, such as the time an application ran (this is determined by the <strong>EndTime</strong> and <strong>DurationMS</strong> — the **Timestamp **column actually refers to when the ESE record was written which may be some time later), the user who ran it, and the duration it was executing. Sometimes the information also includes valid network transfer count which might be useful for some investigations (e.g. exfiltration).</p><h3 id=application-resource-usage>Application Resource Usage</h3><p>This artifact source stores cumulative information about the running executable. Therefore it can not be used to determine exact start time (The Timestamp field corresponds to when the record was written to the ESE database). The advantage here is that the full path is provided, making it easy to search for executables running from unusual locations (e.g. temp folders and network drives).</p><p><img src=../../img/1_RLUyUIKBk5VHpHwIlOMAKQ.png alt></p><h2 id=hunting-the-srum-database>Hunting the SRUM database</h2><p>Sometimes we need to determine which endpoint in our fleet has run a particular binary — perhaps with a unique name. For example, a phishing campaign might launch a trojan malware with a specific name.</p><p>To simulate this I copied a binary to the user’s temp folder with the unique name <code>sdfjhsdfc.exe</code>. I then ran it for a while.</p><p>Next, I created a hunt, but this time, instead of dumping the entire SRUM table, I filtered the results by the name of the binary.</p><p><img src=../../img/1_KGdoKsM1v3RcqRhqREVueg.png alt></p><p>Within minutes I was able to determine exactly which user executed the binary, and on which endpoint. If a machine is not online when I first launched the hunt, it will run the hunt when it next connected to the server and deliver its results later.</p><p><img src=../../img/1_p7m7XfByE0RzuaeCB-GEfw.png alt></p><h2 id=conclusions>Conclusions</h2><p>SRUM is an excellent source of evidence of execution of binaries. In practice we often see upwards of 60 days of evidence within the ESE database — so it goes back quite a long time!</p><p>There is a wealth of information available within the SRUM database, but current Velociraptor artifacts have some limitations:</p><ol><li><p>The data written to the SRUM ESE database is first cached in the registry and then flushed to the database periodically (This is why much of the time the <strong>Timestamp</strong> field will be much later than the <strong>EndTime)</strong>. Currently Velociraptor’s artifacts are not able to parse the registry cache so very recent executions will probably be missed.</p></li><li><p>Currently Velociraptor only parses a few tables from the SRUM database, but many additional tables appear to be useful.</p></li></ol><p>These limitations are likely to improve in future as more artifacts are written to fully extract information the SRUM database.</p><h2 id=training>Training</h2><p>If you happen to be in Sydney or Melbourne and would like to learn more about incident response techniques such as the SRUM database and how to apply them with Velociraptor, consider joining us in our <a href=https://www.velocidex.com/training/>upcoming training events</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<span class=links>Digging into the System Resource Usage Monitor (SRUM)</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#uncovering-history-with-velociraptor>Uncovering history with Velociraptor</a><ul><li></li><li><a href=#the-execution-stats-source>The Execution Stats source</a></li><li><a href=#application-resource-usage>Application Resource Usage</a></li></ul></li><li><a href=#hunting-the-srum-database>Hunting the SRUM database</a></li><li><a href=#conclusions>Conclusions</a></li><li><a href=#training>Training</a></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Digging into the System Resource Usage Monitor (SRUM)</h1><h2 id=uncovering-history-with-velociraptor>Uncovering history with Velociraptor</h2><h4 id=by-mike-cohen>By Mike Cohen</h4><p><img src=../../img/0_yFgW11ar3mogfljd.jpg alt></p><p>Commonly in many incident response scenarios we need to gather evidence of program executions. For example, a phishing email delivering malware was sent to a user — did the user click on it? Did the malware run? was the email forwarded to any other users?</p><p>One of the most useful sources of evidence of execution on Windows is the System Resource Usage Monitor (SRUM). It was first described by Yogesh Khatri in the seminal paper “<a href=https://www.sciencedirect.com/science/article/pii/S1742287615000031>Forensic implications of System Resource Usage Monitor (SRUM) data in Windows 8</a>”.</p><p>SRUM is a feature in modern Windows systems which collect statistics on execution of binaries. The information is stored in an Extensible Storage Engine (ESE) database. ESE is Microsoft’s proprietary single file database format, acting similarly to SQLite, as a default storage engine for many applications — including the SRUM database.</p><p>As from the <a href=https://github.com/Velocidex/velociraptor/releases/tag/v0.3.7>0.3.7 release of Velociraptor</a>, an ESE parser is built into the client, allowing VQL artifacts to directly query ESE databases. This opens up the exciting possibility of extracting and querying information from the SRUM database directly on the endpoint.</p><p>Although this post will not go into detail on SRUM itself (This is covered in detail <a href=https://www.sans.org/cyber-security-summit/archives/file/summit-archive-1492184583.pdf>elsewhere</a>), I will describe how Velociraptor’s SRUM artifact can be used to hunt efficiently across many thousands of endpoints to collect evidence relevant to DFIR investigations.</p><p>Have you ever noticed the windows task manager’s “App History” tab?</p><p><figure><img src=../../img/1_1t_puy5xiAPvR4XUosSQtg.png alt="The Task Manager App History tab" class=captioned><figcaption>The Task Manager App History tab</figcaption></figure><em>The Task Manager App History tab</em></p><p>This tab shows running counts of many applications, broken by user that ran them, including network traffic, and total CPU time. Where does the information come from?</p><p>It turns out that the SRUM database is stored within tables inside the ESE database at <em>%windir%\System32\sru\SRUDB.dat.</em></p><p>Let’s examine Velociraptor’s <strong>Windows.Forensics.SRUM</strong> artifact</p><p><img src=../../img/1_Ajiq0F2RaIoqhj8PnuoCvA.png alt></p><p>The artifact contains several sources — examining a different table within the SRUM ESE database. As can be seen, the ESE database is parsed using Velociraptor’s raw NTFS parser since it is usually locked while the system is running. The artifact allows filtering for a specific application name by regular expression.</p><p>The SRUM database actually contains many tables collecting different runtime telemetry. Some of these tables are not publicly documented but may still contain valuable information. It is worthwhile inspecting the raw database file using an external tool (e.g. <a href=https://www.nirsoft.net/utils/ese_database_view.html>Nirsoft **ESEDatabaseView</a>**). The <strong>Windows.Forensics.SRUM</strong> artifact will by default upload the raw ESE file to the server as well as parse it.</p><p>To demonstrate the artifact, I am now going to collect it from one of my endpoints.</p><p><img src=../../img/1_tQOsldVH7wYGPV56wr0xBA.png alt></p><p>I simply search for my endpoint in the GUI, then click* “Collect More Artifacts” *and search for <strong>SRUM</strong> in the search box. I then add this artifact and click “<strong>Next</strong>” to launch it.</p><p><img src=../../img/1_WimaboQJfGvgXKNY6HeCEQ.png alt></p><p>The above shows that the endpoint took around 80 seconds to collect the entire artifact. This includes uploading the 28MB SRUM database, parsing some of the tables in it, and uploading the parsed results.</p><p><img src=../../img/1_fG5W7kOMtrmnB3mnGuWyeQ.png alt></p><p>Viewing the logs generated by the executing query give an indication of how the query is progressing.</p><h3 id=the-execution-stats-source>The Execution Stats source</h3><p>Let&rsquo;s inspect a sample from the “Execution Stats” source</p><p><img src=../../img/1_3lM3jXI47Z1eDQVjoLSfYQ.png alt></p><p>We get some interesting information, such as the time an application ran (this is determined by the <strong>EndTime</strong> and <strong>DurationMS</strong> — the **Timestamp **column actually refers to when the ESE record was written which may be some time later), the user who ran it, and the duration it was executing. Sometimes the information also includes valid network transfer count which might be useful for some investigations (e.g. exfiltration).</p><h3 id=application-resource-usage>Application Resource Usage</h3><p>This artifact source stores cumulative information about the running executable. Therefore it can not be used to determine exact start time (The Timestamp field corresponds to when the record was written to the ESE database). The advantage here is that the full path is provided, making it easy to search for executables running from unusual locations (e.g. temp folders and network drives).</p><p><img src=../../img/1_RLUyUIKBk5VHpHwIlOMAKQ.png alt></p><h2 id=hunting-the-srum-database>Hunting the SRUM database</h2><p>Sometimes we need to determine which endpoint in our fleet has run a particular binary — perhaps with a unique name. For example, a phishing campaign might launch a trojan malware with a specific name.</p><p>To simulate this I copied a binary to the user’s temp folder with the unique name <code>sdfjhsdfc.exe</code>. I then ran it for a while.</p><p>Next, I created a hunt, but this time, instead of dumping the entire SRUM table, I filtered the results by the name of the binary.</p><p><img src=../../img/1_KGdoKsM1v3RcqRhqREVueg.png alt></p><p>Within minutes I was able to determine exactly which user executed the binary, and on which endpoint. If a machine is not online when I first launched the hunt, it will run the hunt when it next connected to the server and deliver its results later.</p><p><img src=../../img/1_p7m7XfByE0RzuaeCB-GEfw.png alt></p><h2 id=conclusions>Conclusions</h2><p>SRUM is an excellent source of evidence of execution of binaries. In practice we often see upwards of 60 days of evidence within the ESE database — so it goes back quite a long time!</p><p>There is a wealth of information available within the SRUM database, but current Velociraptor artifacts have some limitations:</p><ol><li><p>The data written to the SRUM ESE database is first cached in the registry and then flushed to the database periodically (This is why much of the time the <strong>Timestamp</strong> field will be much later than the <strong>EndTime)</strong>. Currently Velociraptor’s artifacts are not able to parse the registry cache so very recent executions will probably be missed.</p></li><li><p>Currently Velociraptor only parses a few tables from the SRUM database, but many additional tables appear to be useful.</p></li></ol><p>These limitations are likely to improve in future as more artifacts are written to fully extract information the SRUM database.</p><h2 id=training>Training</h2><p>If you happen to be in Sydney or Melbourne and would like to learn more about incident response techniques such as the SRUM database and how to apply them with Velociraptor, consider joining us in our <a href=https://www.velocidex.com/training/>upcoming training events</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2019/index.html b/blog/2019/index.html
index 9b580f27301..7f1d8904c40 100644
--- a/blog/2019/index.html
+++ b/blog/2019/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Blog posts from 2019"><link rel=icon href=/images/favicon.png type=image/png><title>2019 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2019/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=top-github-link><a class=github-link title='Edit this page' href=https://github.com/Velocidex/velociraptor-docs/edit/master/content/blog/2019/_index.md target=blank><i class="fas fa-code-branch"></i>
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>2019</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>2019</h1><ul class="children children-div"><div><a href=/blog/2019/2019-12-31_digging-into-the-system-resource-usage-monitor-srum-afbadb1a375/>Digging into the System Resource Usage Monitor (SRUM)</a></div><div><a href=/blog/2019/2019-12-08-velociraptor-to-elasticsearch-3a9fc02c6568/>Velociraptor to Elasticsearch</a></div><div><a href=/blog/2019/2019-11-15_recovering-deleted-ntfs-files-with-velociraptor-1fcf09855311/>Recovering deleted NTFS Files with Velociraptor</a></div><div><a href=/blog/2019/2019-11-12_windows-event-logs-d8d8e615c9ca/>Windows Event Logs</a></div><div><a href=/blog/2019/2019-10-08_triage-with-velociraptor-pt-3-d6f63215f579/>Triage with Velociraptor — Pt 3</a></div><div><a href=/blog/2019/2019-10-04_triage-with-velociraptor-pt-2-d0f79066ca0e/>Triage with Velociraptor — Pt 2</a></div><div><a href=/blog/2019/2019-10-02_triage-with-velociraptor-pt-1-253f57ce96c0/>Triage with Velociraptor — Pt 1</a></div><div><a href=/blog/2019/2019-09-11_velociraptor-s-client-side-buffer-3ce03697a4e6/>Velociraptor’s client side buffer</a></div><div><a href=/blog/2019/2019-03-02/>Agentless hunting with Velociraptor</a></div></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<span class=links>2019</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>2019</h1><ul class="children children-div"><div><a href=/blog/2019/2019-12-31_digging-into-the-system-resource-usage-monitor-srum-afbadb1a375/>Digging into the System Resource Usage Monitor (SRUM)</a></div><div><a href=/blog/2019/2019-12-08-velociraptor-to-elasticsearch-3a9fc02c6568/>Velociraptor to Elasticsearch</a></div><div><a href=/blog/2019/2019-11-15_recovering-deleted-ntfs-files-with-velociraptor-1fcf09855311/>Recovering deleted NTFS Files with Velociraptor</a></div><div><a href=/blog/2019/2019-11-12_windows-event-logs-d8d8e615c9ca/>Windows Event Logs</a></div><div><a href=/blog/2019/2019-10-08_triage-with-velociraptor-pt-3-d6f63215f579/>Triage with Velociraptor — Pt 3</a></div><div><a href=/blog/2019/2019-10-04_triage-with-velociraptor-pt-2-d0f79066ca0e/>Triage with Velociraptor — Pt 2</a></div><div><a href=/blog/2019/2019-10-02_triage-with-velociraptor-pt-1-253f57ce96c0/>Triage with Velociraptor — Pt 1</a></div><div><a href=/blog/2019/2019-09-11_velociraptor-s-client-side-buffer-3ce03697a4e6/>Velociraptor’s client side buffer</a></div><div><a href=/blog/2019/2019-03-02/>Agentless hunting with Velociraptor</a></div></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2020/2020-01-12_hunting-malware-using-mutants-ea08e86dfc19/index.html b/blog/2020/2020-01-12_hunting-malware-using-mutants-ea08e86dfc19/index.html
index c2976250acd..1eb8bcdf918 100644
--- a/blog/2020/2020-01-12_hunting-malware-using-mutants-ea08e86dfc19/index.html
+++ b/blog/2020/2020-01-12_hunting-malware-using-mutants-ea08e86dfc19/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Scaling up with Velociraptor"><link rel=icon href=/images/favicon.png type=image/png><title>Hunting Malware using Mutants :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-01-12_hunting-malware-using-mutants-ea08e86dfc19/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-01-12_hunting-malware-using-mutants-ea08e86dfc19/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -80,4 +80,4 @@
 <a href=https://docs.microsoft.com/en-us/windows/win32/api/synchapi/nf-synchapi-createmutexa><code>CreateMutex</code></a>
 call succeeds then the malware can continue to run. If the call fails
 it is most likely because another copy of the malware is already
-running, therefore the malware will exit.</p><p>The actual name of the mutant is randomly chosen but typically predictable. Many malware variants hard code the name (more on this below). Services such a Virus Total and malware classification and analysis systems will often record the names of the created Mutex objects in their analysis. For example consider the following hash I grabbed in random from the OSINT thread feed at <a href=https://osint.digitalside.it/Threat-Intel/digitalside-misp-feed/5e1533e4-bb94-4c3f-82c2-2263c0a8018c.json>https://osint.digitalside.it/Threat-Intel/digitalside-misp-feed/5e1533e4-bb94-4c3f-82c2-2263c0a8018c.json</a> . This particular alert concerns a specific malware detected by <a href=https://www.virustotal.com/gui/file/6b78ad1d871efaf95ef0f48ac62bc00b948ea80f96ee21b4d29dbd76a0a10ee0/detection>VirusTotal</a>.</p><p><img src=../../img/1xcKqFOcYn6PWqa-3WSc5hw.png alt></p><p>It looks pretty nasty. VirusTotal also documents some interesting behavioral characteristics. Specifically we see the malware creates a bunch of Mutex objects with specific names</p><p><img src=../../img/1qS7_iGW3UwaFxVKPAEgu8A.png alt></p><p>We can use this information to hunt for the specific mutexes in our environment to check if the malware is installed anywhere. Even if we don’t get a hit right away, it is still useful to collect all the Mutant objects on our endpoints anyway and record them for historical purposes — we can then routinely run known bad mutant names against our historical record to detect past compromises we may not have been aware of.</p><h3 id=simulating-malware-that-uses-mutants>Simulating Malware that uses Mutants</h3><p>Let’s emulate the behavior of a typical rootkit malware. The following simple PowerShell script simply tries to acquire a global mutant and if successful proceeds to sleeping for some time. If the script is unable to acquire the mutant, it will simply exit.</p><script src=https://gist.github.com/scudette/1136b419fc15b08b971b5f94458e20f6.js></script><p>Lets test this script — the first time it is run from one terminal the mutant is acquired. If run again the script is unable to obtain the mutant and simply exits after printing a message.</p><p><img src=../../img/1QjSyPyxu3v6dOwZ460howg.png alt></p><p>Velociraptor has an artifact specifically designed to collect Mutants from Windows endpoints. Let’s take a closer look at the VQL behind the <strong>Windows.Detection.Mutants</strong> artifact</p><p><img src=../../img/15-jpdsPauFv5wVBdMMiJRg.png alt></p><p>The artifact actually offers two methods for collecting Named Mutex objects:</p><ol><li><p>Collecting via the <strong>handles()</strong> VQL plugin will enumerate all <a href=https://docs.microsoft.com/en-us/windows/win32/sysinfo/kernel-objects>open handles</a> for each process and filter out only the Mutant handles.</p></li><li><p>Using the Kernel Object Tree, the <strong>winobj()</strong> VQL plugin enumerates the <a href=https://docs.microsoft.com/en-us/windows/win32/sync/object-namespaces>kernel’s object namespace.</a></p></li></ol><p>Let’s see what this artifact returns (I will filter the GUI to only show the Mutant we created to avoid confusion, since there are typically many Mutants on a real system created by legitimate software). The following figures show the bad mutant as discovered via the two supported methods</p><p><figure><img src=../../img/1v6c84PV3lD_77ICQDfuBgA.png alt="Mutant discovered by the handles() plugin method" class=captioned><figcaption>Mutant discovered by the handles() plugin method</figcaption></figure><em>Mutant discovered by the handles() plugin method</em></p><p><figure><img src=../../img/1sU6LWAc-Qv4yC7knzPcXnw.png alt="Mutant discovered by inspecting the Windows Object Namespace" class=captioned><figcaption>Mutant discovered by inspecting the Windows Object Namespace</figcaption></figure><em>Mutant discovered by inspecting the Windows Object Namespace</em></p><p>Clearly enumerating the handles of each process is much more useful — we can tell the process that actually holds the mutant handle (which in practice would be the rootkit process itself — or the host process in case of dll injection). Enumerating the kernel’s object namespace does not actually reveal a lot of context information but does positively identify the mutant’s presence. (The entire collection took around 6 seconds most of the time was spent enumerating all process handles).</p><p>In practice enumerating the handles of all running processes is much more expensive than simply enumerating the kernel’s namespace. Usually we just want to confirm or deny a specific Mutant name (which might appear in our threat intelligence stream) and for this it is sufficient to enumerate the kernel’s object namespace. Additionally, Velociraptor is unable to attach to some processes in order to enumerate their handles (e.g. system level processes) so it is not always able to get all handles. However, enumerating the kernel’s object namespace works better.</p><h2 id=turning-detection-into-monitoring><strong>Turning detection into monitoring</strong></h2><p>While hunting for mutants periodically across the network is not too difficult (simply schedule a hunt for the <strong>Windows.Detection.Mutants</strong> artifact) what would be really nice is to get a continuous live stream of mutants as they appear on the endpoint. This is a classic example of turning a Velociraptor artifact into a monitoring artifact.</p><p>I will start off by reusing the <strong>Windows.Detection.Mutants</strong> artifact. I will only use the method which enumerates the kernel namespace via the <strong>winobj()</strong> VQL plugin — first I search for it then click the edit button.</p><p><img src=../../img/12CL6_OlHYcn6SBuuD1JwIQ.png alt></p><p>I will change the type of the artifact to <strong>CLIENT_EVENT</strong> — this will allow Velociraptor to run it as a monitoring artifact on the endpoint.</p><p>What I actually want to collect are names of new mutant objects as they are created. I will enumerate the mutants periodically and then simply send the new mutants that appear since the last time as events to the server.</p><p>The <a href=https://www.velocidex.com/docs/vql_reference/event/><strong>diff()</strong> </a>VQL plugin is perfect for this — the plugin simple runs a query periodically (e.g. every minute) then emits the rows which have been added or removed from last time.</p><p><img src=../../img/11LTau_Ip_MRc6-ppQbXm9Q.png alt></p><p>Now I will simply add the monitoring artifact to the client’s event monitoring table. This will get the endpoint to sync its monitoring artifacts and begin watching for new mutants.</p><p><img src=../../img/1brhdj2MIDJyb6FV4TgT9uw.png alt></p><p>A short time later, the events begin flowing to the server. I will run my PowerShell script to generate some bad mutant names and watch it in the GUI</p><p><img src=../../img/1qu-OoE-SWwrQhMptI-rGmQ.png alt></p><p>Once the event monitoring queries are synced with the client, the client will continue monitoring for new mutants — event when the endpoint is offline! The events will simply be queued on the endpoint until such time it can deliver them to the server.</p><p><strong>Conclusions</strong></p><p>In practice this is only a part of a larger solution. The mutants we collect from the endpoint are simply collected in the Velociraptor data store as large CSV files. It is possible to quickly search them (e.g. with a yara rule) and determine if any of the endpoints have a particular mutant name. For example if you have a threat feed with mutant names you may simply scan over all your historical files periodically.</p><p>Alternatively you can forward these events to a SIEM or Elasticsearch for easier integration with existing tooling (See<a href="https://medium.com/velociraptor-ir/velociraptor-to-elasticsearch-3a9fc02c6568?source=friends_link&amp;sk=033f359180bf97b2b1f48a021ad3f0c5"> Velociraptor to Elastic</a>). Velociraptor’s role is simply to collect the data — indexing and searching is left to you.</p><p>Hunting based on mutant name is an old technique and many new malware tools have adapted to produce semi-random mutant names, unique for each machine (e.g. they might hash the hostname to get a unique but stable mutant name). By collecting mutant names from all machines in your deployment you might be able to identify suspicious names even if they are unique.</p><p>Have you had much success hunting malware based on mutant names? Add your comments below to share your experiences…</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+running, therefore the malware will exit.</p><p>The actual name of the mutant is randomly chosen but typically predictable. Many malware variants hard code the name (more on this below). Services such a Virus Total and malware classification and analysis systems will often record the names of the created Mutex objects in their analysis. For example consider the following hash I grabbed in random from the OSINT thread feed at <a href=https://osint.digitalside.it/Threat-Intel/digitalside-misp-feed/5e1533e4-bb94-4c3f-82c2-2263c0a8018c.json>https://osint.digitalside.it/Threat-Intel/digitalside-misp-feed/5e1533e4-bb94-4c3f-82c2-2263c0a8018c.json</a> . This particular alert concerns a specific malware detected by <a href=https://www.virustotal.com/gui/file/6b78ad1d871efaf95ef0f48ac62bc00b948ea80f96ee21b4d29dbd76a0a10ee0/detection>VirusTotal</a>.</p><p><img src=../../img/1xcKqFOcYn6PWqa-3WSc5hw.png alt></p><p>It looks pretty nasty. VirusTotal also documents some interesting behavioral characteristics. Specifically we see the malware creates a bunch of Mutex objects with specific names</p><p><img src=../../img/1qS7_iGW3UwaFxVKPAEgu8A.png alt></p><p>We can use this information to hunt for the specific mutexes in our environment to check if the malware is installed anywhere. Even if we don’t get a hit right away, it is still useful to collect all the Mutant objects on our endpoints anyway and record them for historical purposes — we can then routinely run known bad mutant names against our historical record to detect past compromises we may not have been aware of.</p><h3 id=simulating-malware-that-uses-mutants>Simulating Malware that uses Mutants</h3><p>Let’s emulate the behavior of a typical rootkit malware. The following simple PowerShell script simply tries to acquire a global mutant and if successful proceeds to sleeping for some time. If the script is unable to acquire the mutant, it will simply exit.</p><script src=https://gist.github.com/scudette/1136b419fc15b08b971b5f94458e20f6.js></script><p>Lets test this script — the first time it is run from one terminal the mutant is acquired. If run again the script is unable to obtain the mutant and simply exits after printing a message.</p><p><img src=../../img/1QjSyPyxu3v6dOwZ460howg.png alt></p><p>Velociraptor has an artifact specifically designed to collect Mutants from Windows endpoints. Let’s take a closer look at the VQL behind the <strong>Windows.Detection.Mutants</strong> artifact</p><p><img src=../../img/15-jpdsPauFv5wVBdMMiJRg.png alt></p><p>The artifact actually offers two methods for collecting Named Mutex objects:</p><ol><li><p>Collecting via the <strong>handles()</strong> VQL plugin will enumerate all <a href=https://docs.microsoft.com/en-us/windows/win32/sysinfo/kernel-objects>open handles</a> for each process and filter out only the Mutant handles.</p></li><li><p>Using the Kernel Object Tree, the <strong>winobj()</strong> VQL plugin enumerates the <a href=https://docs.microsoft.com/en-us/windows/win32/sync/object-namespaces>kernel’s object namespace.</a></p></li></ol><p>Let’s see what this artifact returns (I will filter the GUI to only show the Mutant we created to avoid confusion, since there are typically many Mutants on a real system created by legitimate software). The following figures show the bad mutant as discovered via the two supported methods</p><p><figure><img src=../../img/1v6c84PV3lD_77ICQDfuBgA.png alt="Mutant discovered by the handles() plugin method" class=captioned><figcaption>Mutant discovered by the handles() plugin method</figcaption></figure><em>Mutant discovered by the handles() plugin method</em></p><p><figure><img src=../../img/1sU6LWAc-Qv4yC7knzPcXnw.png alt="Mutant discovered by inspecting the Windows Object Namespace" class=captioned><figcaption>Mutant discovered by inspecting the Windows Object Namespace</figcaption></figure><em>Mutant discovered by inspecting the Windows Object Namespace</em></p><p>Clearly enumerating the handles of each process is much more useful — we can tell the process that actually holds the mutant handle (which in practice would be the rootkit process itself — or the host process in case of dll injection). Enumerating the kernel’s object namespace does not actually reveal a lot of context information but does positively identify the mutant’s presence. (The entire collection took around 6 seconds most of the time was spent enumerating all process handles).</p><p>In practice enumerating the handles of all running processes is much more expensive than simply enumerating the kernel’s namespace. Usually we just want to confirm or deny a specific Mutant name (which might appear in our threat intelligence stream) and for this it is sufficient to enumerate the kernel’s object namespace. Additionally, Velociraptor is unable to attach to some processes in order to enumerate their handles (e.g. system level processes) so it is not always able to get all handles. However, enumerating the kernel’s object namespace works better.</p><h2 id=turning-detection-into-monitoring><strong>Turning detection into monitoring</strong></h2><p>While hunting for mutants periodically across the network is not too difficult (simply schedule a hunt for the <strong>Windows.Detection.Mutants</strong> artifact) what would be really nice is to get a continuous live stream of mutants as they appear on the endpoint. This is a classic example of turning a Velociraptor artifact into a monitoring artifact.</p><p>I will start off by reusing the <strong>Windows.Detection.Mutants</strong> artifact. I will only use the method which enumerates the kernel namespace via the <strong>winobj()</strong> VQL plugin — first I search for it then click the edit button.</p><p><img src=../../img/12CL6_OlHYcn6SBuuD1JwIQ.png alt></p><p>I will change the type of the artifact to <strong>CLIENT_EVENT</strong> — this will allow Velociraptor to run it as a monitoring artifact on the endpoint.</p><p>What I actually want to collect are names of new mutant objects as they are created. I will enumerate the mutants periodically and then simply send the new mutants that appear since the last time as events to the server.</p><p>The <a href=https://www.velocidex.com/docs/vql_reference/event/><strong>diff()</strong> </a>VQL plugin is perfect for this — the plugin simple runs a query periodically (e.g. every minute) then emits the rows which have been added or removed from last time.</p><p><img src=../../img/11LTau_Ip_MRc6-ppQbXm9Q.png alt></p><p>Now I will simply add the monitoring artifact to the client’s event monitoring table. This will get the endpoint to sync its monitoring artifacts and begin watching for new mutants.</p><p><img src=../../img/1brhdj2MIDJyb6FV4TgT9uw.png alt></p><p>A short time later, the events begin flowing to the server. I will run my PowerShell script to generate some bad mutant names and watch it in the GUI</p><p><img src=../../img/1qu-OoE-SWwrQhMptI-rGmQ.png alt></p><p>Once the event monitoring queries are synced with the client, the client will continue monitoring for new mutants — event when the endpoint is offline! The events will simply be queued on the endpoint until such time it can deliver them to the server.</p><p><strong>Conclusions</strong></p><p>In practice this is only a part of a larger solution. The mutants we collect from the endpoint are simply collected in the Velociraptor data store as large CSV files. It is possible to quickly search them (e.g. with a yara rule) and determine if any of the endpoints have a particular mutant name. For example if you have a threat feed with mutant names you may simply scan over all your historical files periodically.</p><p>Alternatively you can forward these events to a SIEM or Elasticsearch for easier integration with existing tooling (See<a href="https://medium.com/velociraptor-ir/velociraptor-to-elasticsearch-3a9fc02c6568?source=friends_link&amp;sk=033f359180bf97b2b1f48a021ad3f0c5"> Velociraptor to Elastic</a>). Velociraptor’s role is simply to collect the data — indexing and searching is left to you.</p><p>Hunting based on mutant name is an old technique and many new malware tools have adapted to produce semi-random mutant names, unique for each machine (e.g. they might hash the hostname to get a unique but stable mutant name). By collecting mutant names from all machines in your deployment you might be able to identify suspicious names even if they are unique.</p><p>Have you had much success hunting malware based on mutant names? Add your comments below to share your experiences…</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2020/2020-03-06-velociraptor-post-processing-with-jupyter-notebook-and-pandas-8a344d05ee8c/index.html b/blog/2020/2020-03-06-velociraptor-post-processing-with-jupyter-notebook-and-pandas-8a344d05ee8c/index.html
index bcb21bbfa68..df89d4fcebe 100644
--- a/blog/2020/2020-03-06-velociraptor-post-processing-with-jupyter-notebook-and-pandas-8a344d05ee8c/index.html
+++ b/blog/2020/2020-03-06-velociraptor-post-processing-with-jupyter-notebook-and-pandas-8a344d05ee8c/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Making sense of the data…"><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor Post-processing with Jupyter Notebook and Pandas :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-03-06-velociraptor-post-processing-with-jupyter-notebook-and-pandas-8a344d05ee8c/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-03-06-velociraptor-post-processing-with-jupyter-notebook-and-pandas-8a344d05ee8c/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Velociraptor Post-processing with Jupyter Notebook and Pandas</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><ul><li><a href=#jupyter-notebook>Jupyter Notebook</a></li><li><a href=#configuring-jupyter-access-to-the-velociraptor-server>Configuring Jupyter access to the Velociraptor Server</a></li><li><a href=#creating-an-api-key>Creating an API key</a></li><li><a href=#installing-jupyter-and-pandas>Installing Jupyter and Pandas</a></li><li><a href=#running-vql-in-the-notebook>Running VQL in the notebook</a></li><li><a href=#using-jupyter-to-investigate-a-hunt>Using Jupyter to investigate a hunt</a></li><li><a href=#plotting-graphs>Plotting graphs</a></li><li><a href=#conclusions>Conclusions</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Velociraptor Post-processing with Jupyter Notebook and Pandas</h1><p><img src="../../img/11fFaw5h0oG_ICHv7Q7Haog.png?width=600px" alt></p><p>Velociraptor is a powerful endpoint visibility tool. The unique strength of the tool is being able to collect endpoint state by using the Velociraptor Query Language (VQL) via custom or curated “<a href=https://www.velocidex.com/docs/user-interface/artifacts/>Artifacts</a>”. Not only can one collect artifacts from a single host, but one can collect the same artifact from many thousands of hosts within seconds.</p><p>Being able to collect a lot of data quickly is awesome, but the flip side is that a lot of data makes it harder to review manually. We can always tune artifacts by editing the VQL to be more surgical which helps with reducing the collected data, but we would often still like to be able to post process and understand the data we get back in a convenient way.</p><p>Velociraptor allows you to download the results of a hunt into a zip file. In the zip file, you can find a combined CSV file containing the results from all endpoints. You can process this file using an external tool or upload to a database.</p><p><img src=../../img/1q6eE6r23LPXwe0BDbEM4fw.png alt></p><p>In a <a href=../2020-01-12_hunting-malware-using-mutants-ea08e86dfc19/>previous article</a> we have seen how to forward Velociraptor collected data to Elastic and Kibana for post processing. While this is certainly useful, we often want to quickly analyze the data we have and provide a working document of our findings without needing additional infrastructure.</p><h3 id=jupyter-notebook>Jupyter Notebook</h3><p><a href=https://jupyter.org/>Jupyter notebook</a> is an amazing project fusing interactive data analysis and documentation into a single application. A Jupyter notebook consists of a series of cells, each cell can be either markdown formatted text, or a Python code snippet, which gets evaluated and the results are stored in the cell’s output section. The notebook contains the analyst work as they are working and can then be exported as a final report using a variety of formats (pdf, html etc).</p><p>The notebook approach is ideal for DFIR investigations. Since we don&rsquo;t typically know what is important when we start our investigation, we go through checking various things and drilling down into various evidence sources. The notebook keeps track of all our work and records our analysis until we narrow down the intrusions, documenting any dead-ends we might encounter and documenting our findings in a logical easy to follow way.</p><p>In this article I will show how to use Jupyter to post-process some simple Velociraptor hunts to perform a typical DFIR response.</p><div class="mynotices note"><div heading=note><p>Note that while Jupyter and Pandas are both written in Python you do not actually need to know Python to use Jupyter with Velociraptor. Jupyter simply evaluates VQL statements on the Velociraptor server and displays their result in the notebook. Similarly you don&rsquo;t need to be a VQL expert — Event a basic understanding of VQL is sufficient to be able to drill down into the hunt results.</p></div></div><h3 id=configuring-jupyter-access-to-the-velociraptor-server>Configuring Jupyter access to the Velociraptor Server</h3><p>In order for Jupyter to connect to the Velociraptor server, we will use the Velociraptor API to issue VQL queries directly on the server.</p><p>By default, the server’s API service is not exposed to the internet. We can modify the server’s configuration to allow this by simply changing the API’s bind port to 0.0.0.0</p><p>In our example we have an Ubuntu server running Velociraptor in<a href=https://www.velocidex.com/docs/getting-started/cloud/#deploying-to-the-cloud> the recommended way</a>. When used in this way, Velociraptor runs under a low privilege user account called “velociraptor”.</p><p>We therefore need to change to that user, edit the configuration file and restart the service. Finally we check that the service is listening on all interfaces with port 8001.</p><p><img src=../../img/1d0MOYqBImpL4rfUeaB0mEw.png alt></p><p><img src=../../img/1KcIJClHBVGpJEb7uud9YOw.png alt></p><h3 id=creating-an-api-key>Creating an API key</h3><p>In order to allow access, Velociraptor requires an API key file to be created. This file contains certificates and key material for authenticating an API client with the server. Simply generate a new key and name it with a unique name (In our case we will call the key <strong>Mike</strong>)</p><p><img src=../../img/1ChgJFdKblfhINrga14RElw.png alt></p><p>Since release 0.4.0 you will also need to explicitly grant the key query permissions</p><p><img src=../../img/1ScauB3x9K8eWbKKvoGCv9w.png alt></p><h3 id=installing-jupyter-and-pandas>Installing Jupyter and Pandas</h3><p>Jupyter and Pandas are written in Python and therefore can be easily installed using the pip package manager that comes with python. We will also use Velociraptor’s python bindings to talk with the server (If you want to plot graphs you will also need to install matplotlib).</p><pre><code># pip install pyvelociraptor jupyter pandas
-</code></pre><p><img src=../../img/1OcyptZNE9dk4N3UEXcbtpQ.png alt></p><p>Next copy the API key we generated on the server to your workstation and make sure that the api_connection_string is pointing to the server’s public DNS name</p><p><img src=../../img/1stl9_KDM4aO2TbzyB7h2vg.png alt></p><p>The easiest way to provide Python programs with the API key is to simply set the path to the key file in the environment variable <strong>VELOCIRAPTOR_API_FILE</strong>. We can then launch the Jupyter notebook.</p><p><img src=../../img/1ZtI7wXzoUpHX_1A6WKVcUg.png alt></p><p>This will open the browser and should present the Jupyter web app. We can now create a new notebook using the regular Python3 kernel.</p><p><img src=../../img/14Q6TJx6GFp8vrhSYjcQNFw.png alt></p><h3 id=running-vql-in-the-notebook>Running VQL in the notebook</h3><p>Jupyter notebooks provide cells with input editable areas, where you can write python code. The code will be evaluated when pressing CTRL-Enter and the result is shown in the output part of the cell.</p><p>Pandas is a popular data exploration and transformation library which works great with Jupyter. We will use Pandas to explore the result of VQL queries we issue to the server.</p><p>To test our connection, we run the simple query “SELECT * FROM info()” which just provides information about the running platform.</p><script src=https://gist.github.com/scudette/4db9f8b8c288d7d2650acd4a5908ea9f.js></script><p>If all goes well, the Velociraptor Python bindings will attempt to connect to the server, run the VQL statement on the server and present the results as a table within the notebook.</p><p><img src=../../img/1zIo1vmWBb8L_5U9LIy0_ag.png alt></p><div class="mynotices note"><div heading=note><p>NOTE: The VQL queries we issue in the notebook run directly on the server. You can do anything with these queries, including collecting new artifact on any endpoint, starting and stopping hunts and inspecting any collected data. Velociraptor currently does not offer fine grained ACLs — being able to run VQL is effectively the same as having root level access everywhere. Please take care to secure the API key file on your workstation.</p></div></div><h3 id=using-jupyter-to-investigate-a-hunt>Using Jupyter to investigate a hunt</h3><p>With the power of Jupyter and VQL you can do some really sophisticated analysis, but in this section I will just demonstrate a very typical process of drilling into data, including and excluding filters and identifying important trends.</p><p>For this example I will schedule a collection of the windows task scheduler files in a hunt. Malware typically installs scheduled tasks to ensure persistence — the task will run at a later time and will guarantee the malware is re-installed.</p><p><figure><img src=../../img/1Bs3on9WKi6Jx6qs8kFENEA.png alt="We schedule the Windows.System.TaskScheduler hunt to collect and analyze all scheduled tasks." class=captioned><figcaption>We schedule the Windows.System.TaskScheduler hunt to collect and analyze all scheduled tasks.</figcaption></figure><em>We schedule the Windows.System.TaskScheduler hunt to collect and analyze all scheduled tasks.</em></p><p>In a real investigation, the hunt will collect all the scheduled tasks from thousands of machines, making manual analysis tedious and challenging.</p><p><figure><img src=../../img/1Nu4ZOANqPJYg962prCJtFA.png alt="We can see the hunt id assigned to this hunt. We will need this ID when querying through the API" class=captioned><figcaption>We can see the hunt id assigned to this hunt. We will need this ID when querying through the API</figcaption></figure><em>We can see the hunt id assigned to this hunt. We will need this ID when querying through the API</em></p><p>We start off by exploring the results of the hunt — simply select all columns from the hunt results but limit the result of only a small set for inspection. We will call the <a href=https://www.velocidex.com/docs/vql_reference/server/#hunt-results>hunt_results</a> VQL plugin and provide it with the hunt id, the artifact we collected and the source in the artifact.</p><script src=https://gist.github.com/scudette/e990ca3fafb7302b05c6cf583e89a3a1.js></script><p>It is very important to limit the query otherwise the server will send too many rows and take a long time. If this happens you can select Jupyter’s Kernel->Interrupt menu to abort the query.</p><p><img src=../../img/1vQXPUJA1ooY_XLhyDhPbOg.png alt></p><p>The collected hunt contains too many columns for our current purpose, so we simply restrict the columns shown to <strong>FullPath, Command, Arguments and Fqdn.</strong></p><p><img src=../../img/1X3HZ0Wi7NTz_ou3Jec2v3A.png alt></p><p>This looks better!</p><p>We know that many malware scheduled tasks tend to run cmd.exe as the command, so we want to only check for tasks running cmd.exe next. We simply add a <strong>WHERE Command =~ ‘cmd.exe’</strong> clause (In VQL =~ is the regex match operator).</p><p><img src=../../img/1IqVixgwp_kpJufyzf84ylA.png alt></p><p>After some investigation we determine that the commands running <strong>silcollector</strong> are actually legitimate. Also <strong>dsregcmd.exe</strong> is not related to the malware and is legitimate. Simply add some more filters to exclude those conditions.</p><p><img src=../../img/11IqgundpX4Mp5Qw__gA4MQ.png alt></p><p>This isolated the data we actually want. In a large malware infection, we might see many suspicious tasks deployed to many hosts at the same time. We can repeat the process of including, and excluding tasks based on various criteria to get an idea of which machines are compromised.</p><h3 id=plotting-graphs>Plotting graphs</h3><p><a href=https://pandas.pydata.org/>Pandas</a> also supports plotting graphs through <a href=https://matplotlib.org/>matplotlib</a>. The next VQL snippet simply extracts the kill timestamp (when a flow ended) from a particular hunt to visualize how this hunt actually progressed over time. We can use Pandas to manipulate the timestamps and then plot them into the notebook.</p><p><img src=../../img/1M_kYmIvuI1bKQahVYlOj5Q.png alt></p><p>As can be see in the above plot, this particular hunt collected artifacts from about 1750 endpoints within about a minute (collecting the machines currently connected to the server) then as the next few days progressed, more machines came back online completing the collection. Slowly the total number reached gradually the entire fleet.</p><p>This graph demonstrates that in practice, while we can query the hunt immediately in order to triage those machines currently online, as machines are added to the hunt over time the hunt’s data is growing and changing.</p><p>Jupyter allows each cell to re-run and refresh its output at any time. For important cells we might want to re-run them a few days later to ensure more complete data coverage.</p><h3 id=conclusions>Conclusions</h3><p>Jupyter is a great analysis tool because it provides for a way to document our reasoning behind our findings. We can keep a record of all the things we checked, together with the relevant VQL queries. Once complete, the notebook can be exported to HTML for a static view of our findings and can form part of our report.</p><p>Through the Velociraptor API we are able to issue VQL queries directly to the server. This avoids having to export data, move it to another system, insert into another database and then query it. The query will always access the latest data available on the server.</p><p>Although Velociraptor might feel a little like a database as we query it to post process hunts, it does not actually maintain any indexes. This means that each query, Velociraptor is effectively doing a full row scan on the entire hunt result. This can get quite slow for artifacts that collect huge amounts of data. However, in practice we tend to collect surgical artifacts with a relatively small data set by selecting pre-filters within the client side artifacts. There is a tradeoff between being surgical in collection and managing large data sets in post processing.</p><p>If you see yourself executing a lot of queries repeatedly on the same dataset it is probably faster to upload it to Elastic. However, in most cases, we simply want to examine one hunt at a time, and triage the results in a fairly rudimentary way, so that row scan is acceptable.</p><p>I especially like the Jupyter notebook and intend to write entire reports in it as a way of keeping track of any investigation details and results obtained.</p><p>I find that in practice I tend to write very simple VQL queries into the notebook. Most of the time I narrow the columns down, then add inclusion and exclusion filters to see the relevant data. Although VQL is extremely powerful, I think most people would find the simple VQL in the notepad pretty straight forward. Give it a try and see how you go!</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><p><img src=../../img/1OcyptZNE9dk4N3UEXcbtpQ.png alt></p><p>Next copy the API key we generated on the server to your workstation and make sure that the api_connection_string is pointing to the server’s public DNS name</p><p><img src=../../img/1stl9_KDM4aO2TbzyB7h2vg.png alt></p><p>The easiest way to provide Python programs with the API key is to simply set the path to the key file in the environment variable <strong>VELOCIRAPTOR_API_FILE</strong>. We can then launch the Jupyter notebook.</p><p><img src=../../img/1ZtI7wXzoUpHX_1A6WKVcUg.png alt></p><p>This will open the browser and should present the Jupyter web app. We can now create a new notebook using the regular Python3 kernel.</p><p><img src=../../img/14Q6TJx6GFp8vrhSYjcQNFw.png alt></p><h3 id=running-vql-in-the-notebook>Running VQL in the notebook</h3><p>Jupyter notebooks provide cells with input editable areas, where you can write python code. The code will be evaluated when pressing CTRL-Enter and the result is shown in the output part of the cell.</p><p>Pandas is a popular data exploration and transformation library which works great with Jupyter. We will use Pandas to explore the result of VQL queries we issue to the server.</p><p>To test our connection, we run the simple query “SELECT * FROM info()” which just provides information about the running platform.</p><script src=https://gist.github.com/scudette/4db9f8b8c288d7d2650acd4a5908ea9f.js></script><p>If all goes well, the Velociraptor Python bindings will attempt to connect to the server, run the VQL statement on the server and present the results as a table within the notebook.</p><p><img src=../../img/1zIo1vmWBb8L_5U9LIy0_ag.png alt></p><div class="mynotices note"><div heading=note><p>NOTE: The VQL queries we issue in the notebook run directly on the server. You can do anything with these queries, including collecting new artifact on any endpoint, starting and stopping hunts and inspecting any collected data. Velociraptor currently does not offer fine grained ACLs — being able to run VQL is effectively the same as having root level access everywhere. Please take care to secure the API key file on your workstation.</p></div></div><h3 id=using-jupyter-to-investigate-a-hunt>Using Jupyter to investigate a hunt</h3><p>With the power of Jupyter and VQL you can do some really sophisticated analysis, but in this section I will just demonstrate a very typical process of drilling into data, including and excluding filters and identifying important trends.</p><p>For this example I will schedule a collection of the windows task scheduler files in a hunt. Malware typically installs scheduled tasks to ensure persistence — the task will run at a later time and will guarantee the malware is re-installed.</p><p><figure><img src=../../img/1Bs3on9WKi6Jx6qs8kFENEA.png alt="We schedule the Windows.System.TaskScheduler hunt to collect and analyze all scheduled tasks." class=captioned><figcaption>We schedule the Windows.System.TaskScheduler hunt to collect and analyze all scheduled tasks.</figcaption></figure><em>We schedule the Windows.System.TaskScheduler hunt to collect and analyze all scheduled tasks.</em></p><p>In a real investigation, the hunt will collect all the scheduled tasks from thousands of machines, making manual analysis tedious and challenging.</p><p><figure><img src=../../img/1Nu4ZOANqPJYg962prCJtFA.png alt="We can see the hunt id assigned to this hunt. We will need this ID when querying through the API" class=captioned><figcaption>We can see the hunt id assigned to this hunt. We will need this ID when querying through the API</figcaption></figure><em>We can see the hunt id assigned to this hunt. We will need this ID when querying through the API</em></p><p>We start off by exploring the results of the hunt — simply select all columns from the hunt results but limit the result of only a small set for inspection. We will call the <a href=https://www.velocidex.com/docs/vql_reference/server/#hunt-results>hunt_results</a> VQL plugin and provide it with the hunt id, the artifact we collected and the source in the artifact.</p><script src=https://gist.github.com/scudette/e990ca3fafb7302b05c6cf583e89a3a1.js></script><p>It is very important to limit the query otherwise the server will send too many rows and take a long time. If this happens you can select Jupyter’s Kernel->Interrupt menu to abort the query.</p><p><img src=../../img/1vQXPUJA1ooY_XLhyDhPbOg.png alt></p><p>The collected hunt contains too many columns for our current purpose, so we simply restrict the columns shown to <strong>FullPath, Command, Arguments and Fqdn.</strong></p><p><img src=../../img/1X3HZ0Wi7NTz_ou3Jec2v3A.png alt></p><p>This looks better!</p><p>We know that many malware scheduled tasks tend to run cmd.exe as the command, so we want to only check for tasks running cmd.exe next. We simply add a <strong>WHERE Command =~ ‘cmd.exe’</strong> clause (In VQL =~ is the regex match operator).</p><p><img src=../../img/1IqVixgwp_kpJufyzf84ylA.png alt></p><p>After some investigation we determine that the commands running <strong>silcollector</strong> are actually legitimate. Also <strong>dsregcmd.exe</strong> is not related to the malware and is legitimate. Simply add some more filters to exclude those conditions.</p><p><img src=../../img/11IqgundpX4Mp5Qw__gA4MQ.png alt></p><p>This isolated the data we actually want. In a large malware infection, we might see many suspicious tasks deployed to many hosts at the same time. We can repeat the process of including, and excluding tasks based on various criteria to get an idea of which machines are compromised.</p><h3 id=plotting-graphs>Plotting graphs</h3><p><a href=https://pandas.pydata.org/>Pandas</a> also supports plotting graphs through <a href=https://matplotlib.org/>matplotlib</a>. The next VQL snippet simply extracts the kill timestamp (when a flow ended) from a particular hunt to visualize how this hunt actually progressed over time. We can use Pandas to manipulate the timestamps and then plot them into the notebook.</p><p><img src=../../img/1M_kYmIvuI1bKQahVYlOj5Q.png alt></p><p>As can be see in the above plot, this particular hunt collected artifacts from about 1750 endpoints within about a minute (collecting the machines currently connected to the server) then as the next few days progressed, more machines came back online completing the collection. Slowly the total number reached gradually the entire fleet.</p><p>This graph demonstrates that in practice, while we can query the hunt immediately in order to triage those machines currently online, as machines are added to the hunt over time the hunt’s data is growing and changing.</p><p>Jupyter allows each cell to re-run and refresh its output at any time. For important cells we might want to re-run them a few days later to ensure more complete data coverage.</p><h3 id=conclusions>Conclusions</h3><p>Jupyter is a great analysis tool because it provides for a way to document our reasoning behind our findings. We can keep a record of all the things we checked, together with the relevant VQL queries. Once complete, the notebook can be exported to HTML for a static view of our findings and can form part of our report.</p><p>Through the Velociraptor API we are able to issue VQL queries directly to the server. This avoids having to export data, move it to another system, insert into another database and then query it. The query will always access the latest data available on the server.</p><p>Although Velociraptor might feel a little like a database as we query it to post process hunts, it does not actually maintain any indexes. This means that each query, Velociraptor is effectively doing a full row scan on the entire hunt result. This can get quite slow for artifacts that collect huge amounts of data. However, in practice we tend to collect surgical artifacts with a relatively small data set by selecting pre-filters within the client side artifacts. There is a tradeoff between being surgical in collection and managing large data sets in post processing.</p><p>If you see yourself executing a lot of queries repeatedly on the same dataset it is probably faster to upload it to Elastic. However, in most cases, we simply want to examine one hunt at a time, and triage the results in a fairly rudimentary way, so that row scan is acceptable.</p><p>I especially like the Jupyter notebook and intend to write entire reports in it as a way of keeping track of any investigation details and results obtained.</p><p>I find that in practice I tend to write very simple VQL queries into the notebook. Most of the time I narrow the columns down, then add inclusion and exclusion filters to see the relevant data. Although VQL is extremely powerful, I think most people would find the simple VQL in the notepad pretty straight forward. Give it a try and see how you go!</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2020/2020-03-07-extending-vql-plugins-7fb004cb6ec4/index.html b/blog/2020/2020-03-07-extending-vql-plugins-7fb004cb6ec4/index.html
index c86d074a25f..395ef6191c8 100644
--- a/blog/2020/2020-03-07-extending-vql-plugins-7fb004cb6ec4/index.html
+++ b/blog/2020/2020-03-07-extending-vql-plugins-7fb004cb6ec4/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Adding endpoint functionality through Velociraptor Queries."><link rel=icon href=/images/favicon.png type=image/png><title>Extending VQL plugins :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-03-07-extending-vql-plugins-7fb004cb6ec4/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-03-07-extending-vql-plugins-7fb004cb6ec4/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -72,4 +72,4 @@
 <span class=links>Extending VQL plugins</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><ul><li><a href=#vql-basics>VQL Basics</a></li><li><a href=#extending-vql-via-artifacts>Extending VQL via Artifacts</a></li><li><a href=#extending-vql-via-external-code>Extending VQL via external code</a></li><li><a href=#example--list-local-administrator-group-users>Example — List Local Administrator Group Users</a></li><li><a href=#example--remediation>Example — remediation</a></li><li><a href=#conclusions>Conclusions</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Extending VQL plugins</h1><p><img src="../../img/0iyK-hcG9nhlPHVOE.jpg?width=600px" alt></p><p>Velociraptor is a unique endpoint visibility tool because it provides the ability for users to write custom, tailored queries using the <a href=https://www.velocidex.com/docs/vql_reference/>Velociraptor Query Language</a> (VQL). Having a powerful query language right at the endpoint gives our responders unprecedented flexibility, and the ability to leverage the experience of other analysts within the vibrant Velociraptor community.</p><p>VQL is a powerful language but was never designed to be a full featured programming language — it is deliberately kept simple and easy to use. VQL is essentially a glue language that allows more complete capabilities provided by VQL plugins to be strung together into a more functional query.</p><p>For example, raw MFT parsing is provided by the parse_mft() plugin which emits a row for each parsed mft entry. A VQL query can then filter out relevant MFT entries and potentially get a copy of the file, or attempt to recover deleted files (as described in our <a href=../2019-11-15_recovering-deleted-ntfs-files-with-velociraptor-1fcf09855311/>previous article</a>.</p><h3 id=vql-basics>VQL Basics</h3><p>Although VQL is already very well documented elsewhere, for this article I will just outline the basic structure of a VQL query:</p><pre><code class=language-vql> SELECT x, y, z FROM plugin() WHERE x = 1
 </code></pre><p>In the above, the query will run the VQL plugin which will produce a set of rows (A row is simply an object with columns and values). The query will then filter each row by the condition “x=1” and for matching rows, extract the columns x, y and x into the result set.</p><p>The simplicity of this language allows analysts to pick up Velociraptor in a short time and make powerful use of it. However, the actual data is generated by the plugin itself — how does one extend VQL to include new functionality?</p><h3 id=extending-vql-via-artifacts>Extending VQL via Artifacts</h3><p>One way to extend VQL is through defining <a href=https://www.velocidex.com/docs/user-interface/artifacts/>Artifacts</a>. Artifacts are a way to encapsulate other VQL queries in YAML files which can then be shared and added to Velociraptor at any time. Artifacts have a name by which they can be accessed in other queries. For example</p><pre><code> SELECT Name, SID FROM Artifact.Windows.Sys.Users()
 </code></pre><p>The above query will simply run the artifact’s VQL query and emit each user on the system. We can now use it from our own query, filter it etc.</p><h3 id=extending-vql-via-external-code>Extending VQL via external code</h3><p>While the above method is useful, it can only really wrap existing capabilities in Velociraptor — We are just wrapping an existing VQL query in an artifact reusing existing plugins, not extending the basic capabilities of Velociraptor.</p><p>Although VQL already comes with a lot of built in plugins, sometimes what we actually want is not built into Velociraptor itself. This might be because we never thought of the need (please file <a href=https://github.com/Velocidex/velociraptor>a bug for feature requests</a>!) or because it simply would not make sense to include the functionality directly inside Velociraptor.</p><h3 id=example--list-local-administrator-group-users>Example — List Local Administrator Group Users</h3><p>For example, suppose we wanted to list all the users that belong to the local administrator group on Windows. This information is obviously important because local administrators are extremely powerful accounts, and are sometimes granted to users who need administrator access to their local workstation. Often this access is not recorded or tracked properly. Even worse, sometimes local user accounts are created with local administrator group membership allowing those accounts to be logged into without AD oversight or controls. See <a href=https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/implementing-least-privilege-administrative-models#on-workstations>this</a>, and <a href=https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/local-accounts>this</a> for more information.</p><p>While Velociraptor does not offer the functionality to query local groups, the functionality is readily available via PowerShell <a href="https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.localaccounts/get-localgroupmember?view=powershell-5.1">Get-LocalGroupMember commandlet</a>.</p><pre><code>Get-LocalGroupMember -Group “Administrators”
-</code></pre><p>Let’s turn this Powershell commandlet into a Velociraptor artifact</p><script src=https://gist.github.com/scudette/3b2ff76b8d032c800d38375e2cca0dd6.js></script><p>The powershell script simply runs the commandlet and extracts the SID and the username, converting the result to JSON. On the VQL size we encode the script and shell out to Powershell, then decode the output from JSON and produce VQL rows.</p><p><img src=../../img/10seNp3si-PKiAj0pvhrzWg.png alt></p><p>If we now collected this artifact as a hunt from our entire deployment we could have a listing of all local admin accounts within minutes from thousands of endpoints making it trivial to audit.</p><p>The whole VQL query and included powershell are now wrapped in an artifact, which can be called transparently from other VQL statements, further filtered etc. In fact using this methodology encapsulates the exact way the Artifact works, so that callers of this artifact do not really care (and cant really tell) that PowerShell is used instead of having a built in Velociraptor command.</p><p>We effectively just extended the capabilities of the endpoint tool without needing to rebuild or deploy a new version of Velociraptor! This allows for unprecedented flexibility in our DFIR work.</p><h3 id=example--remediation>Example — remediation</h3><p>For the next example, suppose we discovered a widespread infection within our network. Typically, the malware installs various methods of re-infecting a host, and a common way is to install a malicious service (<a href=https://attack.mitre.org/techniques/T1035/>See Att&amp;ck Matrix 1035</a>). The Atomic Red Team has an example <a href=https://github.com/redcanaryco/atomic-red-team/blob/8881bdb0029f186e7e06994e45ab1fb49e7adfa8/atomics/T1035/T1035.md>simulation</a>:</p><p><img src=../../img/1mDYbeZBXbsFzZuWLl_rPXA.png alt></p><p>We can collect the <strong>Windows.System.Services</strong> artifact and identify the malicious service immediately</p><p><img src=../../img/1St0TfmwTFJnRfLGsEuHCHw.png alt></p><p>But now we would like to automatically clean it. We know the malicious service <strong>PathName</strong> value should match the keyword “marker.txt” (In reality we can come up with other unique keywords for the malicious service). So we just write the following artifact:</p><script src=https://gist.github.com/scudette/2185ae021fc78f880a0caaaec3fb03a2.js></script><p>The powershell component actually stops, and removes the bad service, while the VQL component runs the <strong>Windows.System.Services</strong> artifacts, filters out the keyword to identify the malicious service and then calls powershell to remove it.</p><p>Now when collecting the artifact, we can see which machines had the malicious service installed, and how the removal went. We can then collect the <strong>Windows.System.Services</strong> artifact again to check that services were correctly removed.</p><p><img src=../../img/1_gfWrRvoEQhZFQenbsz0MA.png alt></p><p>Running a deployment wide hunt that collects this remediation artifact will automatically remove the bad service from all connected endpoints within a couple minutes. The hunt will then be applied on new endpoints as they come back online.</p><h3 id=conclusions>Conclusions</h3><p>Ultimately the VQL artifacts just delegate the heavy lifting to Powershell. This means that Velociraptor does not need to implement these feature internally since we can already rely on Powershell’s wide support for many products and system administration tasks. Formatting powershell output in machine readable format (like JSON) allows VQL to emit rows which are indistinguishable from those emitted by built in plugins — they can still be filtered and reused as usual in other VQL statements.</p><p>So what advantages does this present over just running remote powershell scripts? Why do we even need Velociraptor at all?</p><p>The main advantage is that Velociraptor has much wider reach — endpoints do not have to be accessible over WinRM, i.e. they can be at home or at a coffee shop, instead of having to stay on the corporate network. Since we never need to actually connect to the endpoint, we can reach it even when it is located behind NAT or filtered networks. Some road warrior type users are never present within the corporate LAN.</p><p>Additionally, when you run a Velociraptor hunt and the client is not immediately online, the hunt is scheduled until the endpoint comes back online. We can be sure to have wide coverage of our endpoints because we don’t need to chase them and try to remotely access them when they come online (some remote machine connect for minutes a day or at unusual timezones). We just set the hunt and forget it — the endpoint will remove the malicious service when it is ready automatically.</p><p>Finally, having the flexibility to encode powershell snippets inside artifacts allows us to develop reusable code. The users of our artifacts don’t really care how it works but can call it and tweak it using other VQL or simply by providing parameters in the GUI. This leads to excellent knowledge sharing and code reusability within the community.</p><p>Finally it must be said that remediation is inherently a risky activity. Most artifacts passively collect data from the endpoint, since Velociraptor is primarily an endpoint visibility tool. Deliberately making changes on the system carries with it an inherent level of risk and should be done very carefully. Like the Hippocratic Oath, we must “first, do no harm” (<a href=https://en.wikipedia.org/wiki/Primum_non_nocere><code>Primum non nocere</code></a>). For example, if our regular expression selecting the malicious services is too loose we might end up removing many critical services from critical systems! Be sure to test your remediation artifacts first by disabling the actual removal script and seeing how many services we would attempt to remove.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><p>Let’s turn this Powershell commandlet into a Velociraptor artifact</p><script src=https://gist.github.com/scudette/3b2ff76b8d032c800d38375e2cca0dd6.js></script><p>The powershell script simply runs the commandlet and extracts the SID and the username, converting the result to JSON. On the VQL size we encode the script and shell out to Powershell, then decode the output from JSON and produce VQL rows.</p><p><img src=../../img/10seNp3si-PKiAj0pvhrzWg.png alt></p><p>If we now collected this artifact as a hunt from our entire deployment we could have a listing of all local admin accounts within minutes from thousands of endpoints making it trivial to audit.</p><p>The whole VQL query and included powershell are now wrapped in an artifact, which can be called transparently from other VQL statements, further filtered etc. In fact using this methodology encapsulates the exact way the Artifact works, so that callers of this artifact do not really care (and cant really tell) that PowerShell is used instead of having a built in Velociraptor command.</p><p>We effectively just extended the capabilities of the endpoint tool without needing to rebuild or deploy a new version of Velociraptor! This allows for unprecedented flexibility in our DFIR work.</p><h3 id=example--remediation>Example — remediation</h3><p>For the next example, suppose we discovered a widespread infection within our network. Typically, the malware installs various methods of re-infecting a host, and a common way is to install a malicious service (<a href=https://attack.mitre.org/techniques/T1035/>See Att&amp;ck Matrix 1035</a>). The Atomic Red Team has an example <a href=https://github.com/redcanaryco/atomic-red-team/blob/8881bdb0029f186e7e06994e45ab1fb49e7adfa8/atomics/T1035/T1035.md>simulation</a>:</p><p><img src=../../img/1mDYbeZBXbsFzZuWLl_rPXA.png alt></p><p>We can collect the <strong>Windows.System.Services</strong> artifact and identify the malicious service immediately</p><p><img src=../../img/1St0TfmwTFJnRfLGsEuHCHw.png alt></p><p>But now we would like to automatically clean it. We know the malicious service <strong>PathName</strong> value should match the keyword “marker.txt” (In reality we can come up with other unique keywords for the malicious service). So we just write the following artifact:</p><script src=https://gist.github.com/scudette/2185ae021fc78f880a0caaaec3fb03a2.js></script><p>The powershell component actually stops, and removes the bad service, while the VQL component runs the <strong>Windows.System.Services</strong> artifacts, filters out the keyword to identify the malicious service and then calls powershell to remove it.</p><p>Now when collecting the artifact, we can see which machines had the malicious service installed, and how the removal went. We can then collect the <strong>Windows.System.Services</strong> artifact again to check that services were correctly removed.</p><p><img src=../../img/1_gfWrRvoEQhZFQenbsz0MA.png alt></p><p>Running a deployment wide hunt that collects this remediation artifact will automatically remove the bad service from all connected endpoints within a couple minutes. The hunt will then be applied on new endpoints as they come back online.</p><h3 id=conclusions>Conclusions</h3><p>Ultimately the VQL artifacts just delegate the heavy lifting to Powershell. This means that Velociraptor does not need to implement these feature internally since we can already rely on Powershell’s wide support for many products and system administration tasks. Formatting powershell output in machine readable format (like JSON) allows VQL to emit rows which are indistinguishable from those emitted by built in plugins — they can still be filtered and reused as usual in other VQL statements.</p><p>So what advantages does this present over just running remote powershell scripts? Why do we even need Velociraptor at all?</p><p>The main advantage is that Velociraptor has much wider reach — endpoints do not have to be accessible over WinRM, i.e. they can be at home or at a coffee shop, instead of having to stay on the corporate network. Since we never need to actually connect to the endpoint, we can reach it even when it is located behind NAT or filtered networks. Some road warrior type users are never present within the corporate LAN.</p><p>Additionally, when you run a Velociraptor hunt and the client is not immediately online, the hunt is scheduled until the endpoint comes back online. We can be sure to have wide coverage of our endpoints because we don’t need to chase them and try to remotely access them when they come online (some remote machine connect for minutes a day or at unusual timezones). We just set the hunt and forget it — the endpoint will remove the malicious service when it is ready automatically.</p><p>Finally, having the flexibility to encode powershell snippets inside artifacts allows us to develop reusable code. The users of our artifacts don’t really care how it works but can call it and tweak it using other VQL or simply by providing parameters in the GUI. This leads to excellent knowledge sharing and code reusability within the community.</p><p>Finally it must be said that remediation is inherently a risky activity. Most artifacts passively collect data from the endpoint, since Velociraptor is primarily an endpoint visibility tool. Deliberately making changes on the system carries with it an inherent level of risk and should be done very carefully. Like the Hippocratic Oath, we must “first, do no harm” (<a href=https://en.wikipedia.org/wiki/Primum_non_nocere><code>Primum non nocere</code></a>). For example, if our regular expression selecting the malicious services is too loose we might end up removing many critical services from critical systems! Be sure to test your remediation artifacts first by disabling the actual removal script and seeing how many services we would attempt to remove.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2020/2020-03-28-velociraptor-notebooks-d02e0bd11230/index.html b/blog/2020/2020-03-28-velociraptor-notebooks-d02e0bd11230/index.html
index e90abc39abf..17a7e84996d 100644
--- a/blog/2020/2020-03-28-velociraptor-notebooks-d02e0bd11230/index.html
+++ b/blog/2020/2020-03-28-velociraptor-notebooks-d02e0bd11230/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Post processing and reporting inside Velociraptor"><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor notebooks :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-03-28-velociraptor-notebooks-d02e0bd11230/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-03-28-velociraptor-notebooks-d02e0bd11230/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Velociraptor notebooks</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#velociraptors-notebooks>Velociraptor’s notebooks</a><ul><li><a href=#what-are-notebooks>What are notebooks?</a></li><li><a href=#case-study--scheduled-tasks>Case study — scheduled tasks</a></li><li><a href=#creating-a-new-notebook>Creating a new notebook</a></li><li><a href=#exporting-the-notebook>Exporting the notebook</a></li></ul></li><li><a href=#conclusions>Conclusions</a></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Velociraptor notebooks</h1><p><img src="../../img/0AgiLbUBbvfxAxu29.jpg?width=600px" alt></p><p>Velociraptor is a great tool for collecting endpoint state easily and efficiently. It is so efficient, that sometimes we end up with a lot of collected data and are left with the task of making sense of the data, and documenting our investigative process.</p><p>In <a href=../2020-03-06-velociraptor-post-processing-with-jupyter-notebook-and-pandas-8a344d05ee8c/>a previous article</a> we have seen how post-processing of collected data can be done using <a href=https://jupyter.org/>Jupyter notebooks</a>. The notebook is a living document, allowing us to run analysis code interspersed among documentation which can be updates in real time, as the analyst post-processes and annotates the data.</p><p>Although one can still use Jupyter notebooks to post process Velociraptor collected data, the latest Velociraptor release (0.4.1) added a notebook feature built in. This saves the effort of connecting Jupyter via the API and running python wrappers to manipulate VQL. Velociraptor notebooks are also better integrated into the rest of Velociraptor with native support for VQL, markdown and embedded images. In this article we will explore a typical workflow of using Velociraptor notebooks to investigate a DFIR</p><h2 id=velociraptors-notebooks>Velociraptor’s notebooks</h2><p>In the following article we analyze the same case as in our <a href=../2020-03-06-velociraptor-post-processing-with-jupyter-notebook-and-pandas-8a344d05ee8c/>previous article</a>. After installing the latest <a href=https://github.com/Velocidex/velociraptor/releases>Velociraptor release</a> (0.4.1) we see a new “Notebooks” menu option on the navigation sidebar.</p><p><img src=../../img/13sxd7Sd06lwHjBYfhVI1Sg.png alt></p><h3 id=what-are-notebooks>What are notebooks?</h3><p>Notebooks are free form, shared documents built right into the Velociraptor GUI. Multiple analysts can view and edit the same notebook simultaneously.</p><p>Typically in DFIR work, analysts do not necessarily immediately know the root cause of an intrusion. Analysis is often a long process of collecting evidence, post processing it in some way, analysing the results and collecting further evidence based on our findings.</p><p>Notebooks are a way of documenting this process while facilitating collaboration between different team members. During the investigation phase, they are a living document collecting conclusions from multiple artifacts, and coordinating team members. While after the investigation they are a document indicating what was done, and the logical process of reaching the final conclusions.</p><h3 id=case-study--scheduled-tasks>Case study — scheduled tasks</h3><p>This is a typical DFIR investigation. We suspect malware has installed malicious scheduled tasks to restart itself. We previously ran a hunt to collect all scheduled tasks and would like to examine the results (see the previous article for background).</p><h3 id=creating-a-new-notebook>Creating a new notebook</h3><p>We will create a notebook to document our analysis process. Selecting the Notebook menu in the sidebar and then clicking the “New Notebook” toolbar button.</p><p><img src=../../img/1x9KwMzONb4xzd4zHd_Ps6A.png alt></p><p>We will name our notebook <em>“Scheduled Tasks — Case 1232”,</em> and add a useful description. Clicking the <em>“Add Notebook”</em> button will create the new notebook which will now be visible in the top pane, and we can see an initial notebook created on the bottom pane.</p><p><img src=../../img/1OlsCPDL8fF7gX13d1l_QzQ.png alt></p><p>A notebook consists of a series of <strong>cells</strong>. Each cell can be of type “Markdown” or “VQL”. In our new notebook, the first cell consists of the name and description we entered earlier. Clicking on the cell shows actions that can be done with that cell.</p><p><img src=../../img/15xWh4-EA-eFZcZJaC8Hjsg.png alt></p><p>Let’s edit this cell and add our rationale for this investigations. Clicking the “Edit Cell” button will open an editor and allow us to write cell content in markdown (If you are not familiar with markdown, GitHub has an excellent guide <a href=https://guides.github.com/features/mastering-markdown/>Mastering Markdown</a>). The cell editor can be either in Markdown mode or VQL mode as selected by the pull down on the right.</p><p><img src=../../img/1oBMVtWq04ags52tUDZanew.png alt></p><p>Let’s also assume that this investigation was started by an alert we received from our SIEM. We can simply take a screenshot of our SIEM alert and paste it into the cell editor to add context to our notebook. Velociraptor will automatically add the image into the notebook and substitute with the markdown to reference it.</p><p>Once we finish adding relevant background information to our notebook, we can save the cell by pressing the <em>“Save” <em>button (or pressing</em> CTRL-Enter</em>).</p><p><img src=../../img/1bWK92yL-TFs5TgCVbB_tzA.png alt></p><p>Velociraptor will render the markdown in the notebook and we can see our screenshot.</p><p>Next we need to post process the scheduled tasks we collected earlier in a hunt. Clicking the “Add Cell” pulldown provides a number of options — in our case, we want to add a cell from an existing hunt.</p><p><img src=../../img/1iCdRbaZvXc5_lcQeMOJXHg.png alt></p><p>Velociraptor will then ask us which hunt we want to use</p><p><img src=../../img/1cpt_3CH1SEF_ThscuTQ0TQ.png alt></p><p>Selecting the hunt and clicking OK will produce a new VQL cell, already populated with the basic query we need to run to see the results of the hunt. Note that we always use the <strong>LIMIT</strong> clause to prevent the GUI from processing too much data. At this stage we only want to see the first 10 rows until we can refine our query.</p><p><img src=../../img/1ek3xccxhmfontfCA-Fdcyg.png alt></p><p>Clicking “Save” will calculate the query and show us the columns available.</p><p><img src=../../img/1fYx33fAnUlegODORnrRW0A.png alt></p><p>We can now refine the columns we see by specifying them in the VQL query. In our case we only wish to see <strong>FullPath, Command, Arguments</strong> and <strong>Fqdn</strong> (The hostname of the endpoint). We know that our alert was for executing “cmd.exe” so we narrow our query to only see scheduled tasks with the <strong>cmd.exe</strong> command <em>(WHERE Command =~ “cmd.exe”)</em>.</p><p><img src=../../img/1GxMuBrebyHtxHh0wLUmflw.png alt></p><p><img src=../../img/1v7Q9nmHRzfbtydgggYRBWA.png alt></p><p>After more investigation we determine that the <code>silcollector</code> and
-<code>dsregcmd</code> tasks are not malicious so we can exclude them.</p><p><img src=../../img/196esqvqOz2HYIKteGdSK3w.png alt></p><p><img src=../../img/1zYsu9uCe-t9T8UkfHPbt3A.png alt></p><p>We repeat the process as needed until left only with the suspicious commands.</p><p>In practice we can now add more markdown cells to explain our findings, implement remediation hunts to remove the malicious scheduled task etc. We can even include the VQL we ran in the report by using markdown code blocks.</p><p><img src=../../img/1iaO11t4Zbn63dQQhkcEDrw.png alt></p><p><img src=../../img/1LyQdC_lK079EUYwwSDT70w.png alt></p><h3 id=exporting-the-notebook>Exporting the notebook</h3><p>It is great to have a notebook inside Velociraptor, but we really need to be able to print it or share it with others. Additionally, DFIR cases are typically very fluid and the notebook will evolve through multiple revisions. As new data becomes available, perhaps conclusions reached in previous versions need to be revised. This is why we say a notebook is a <strong>living</strong> document</p><p>For these reasons, Velociraptor allows users to export the notebook into plain HTML. The HTML export is a point-in-time export, as the investigation proceeds and new information becomes available, the same notebook may be exported again and again, each version revealing new findings.</p><p>To export our notebook we select it in the top pane then click on “Export Notebook” button in the toolbar. The dialog box shows us all the existing exports from previous times and also allows us to create a new export.</p><p><img src=../../img/1-iyUl49fvYJUvwohI5SZNA.png alt></p><p>Clicking on any of the exported files, opens the exported HTML file in another browser window.</p><p><img src=../../img/1zyFeV0l40eujMCj3OgL4aQ.png alt></p><p><img src=../../img/1FfLBeDrVEDJH2B9q8gYlJw.png alt></p><p>Although in this view the tables are not interactive as before, the data is all available there.</p><p>Alternatively, we might want to export the result of each post-processed table. To export one table to CSV we can simply click the “Export to CSV” button at the top left of each notebook table</p><p><img src=../../img/10_ZCTqrANgf010xbAMRS0Q.png alt></p><h2 id=conclusions>Conclusions</h2><p>The new Velociraptor notebook interface adds to Velociraptor’s capabilities as a one stop shop for DFIR investigations. Not only do we have the ability to quickly and efficiently collect artifacts from endpoints, we can now post-process these artifacts in the tool itself. Being able to document our investigative process and produce a report gives us great flexibility without resorting to clunky file exports and spreadsheets.</p><p>Having notebooks as a built-in feature and usable out of the box removes the need for fiddly setup with API connectivity, and supporting external programs like Jupyter or Python. Simple, powerful, works out of the box!</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<code>dsregcmd</code> tasks are not malicious so we can exclude them.</p><p><img src=../../img/196esqvqOz2HYIKteGdSK3w.png alt></p><p><img src=../../img/1zYsu9uCe-t9T8UkfHPbt3A.png alt></p><p>We repeat the process as needed until left only with the suspicious commands.</p><p>In practice we can now add more markdown cells to explain our findings, implement remediation hunts to remove the malicious scheduled task etc. We can even include the VQL we ran in the report by using markdown code blocks.</p><p><img src=../../img/1iaO11t4Zbn63dQQhkcEDrw.png alt></p><p><img src=../../img/1LyQdC_lK079EUYwwSDT70w.png alt></p><h3 id=exporting-the-notebook>Exporting the notebook</h3><p>It is great to have a notebook inside Velociraptor, but we really need to be able to print it or share it with others. Additionally, DFIR cases are typically very fluid and the notebook will evolve through multiple revisions. As new data becomes available, perhaps conclusions reached in previous versions need to be revised. This is why we say a notebook is a <strong>living</strong> document</p><p>For these reasons, Velociraptor allows users to export the notebook into plain HTML. The HTML export is a point-in-time export, as the investigation proceeds and new information becomes available, the same notebook may be exported again and again, each version revealing new findings.</p><p>To export our notebook we select it in the top pane then click on “Export Notebook” button in the toolbar. The dialog box shows us all the existing exports from previous times and also allows us to create a new export.</p><p><img src=../../img/1-iyUl49fvYJUvwohI5SZNA.png alt></p><p>Clicking on any of the exported files, opens the exported HTML file in another browser window.</p><p><img src=../../img/1zyFeV0l40eujMCj3OgL4aQ.png alt></p><p><img src=../../img/1FfLBeDrVEDJH2B9q8gYlJw.png alt></p><p>Although in this view the tables are not interactive as before, the data is all available there.</p><p>Alternatively, we might want to export the result of each post-processed table. To export one table to CSV we can simply click the “Export to CSV” button at the top left of each notebook table</p><p><img src=../../img/10_ZCTqrANgf010xbAMRS0Q.png alt></p><h2 id=conclusions>Conclusions</h2><p>The new Velociraptor notebook interface adds to Velociraptor’s capabilities as a one stop shop for DFIR investigations. Not only do we have the ability to quickly and efficiently collect artifacts from endpoints, we can now post-process these artifacts in the tool itself. Being able to document our investigative process and produce a report gives us great flexibility without resorting to clunky file exports and spreadsheets.</p><p>Having notebooks as a built-in feature and usable out of the box removes the need for fiddly setup with API connectivity, and supporting external programs like Jupyter or Python. Simple, powerful, works out of the box!</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2020/2020-03-29-velociraptors-acl-model-7f497575daee/index.html b/blog/2020/2020-03-29-velociraptors-acl-model-7f497575daee/index.html
index 73c0492fe91..32b76a93804 100644
--- a/blog/2020/2020-03-29-velociraptors-acl-model-7f497575daee/index.html
+++ b/blog/2020/2020-03-29-velociraptors-acl-model-7f497575daee/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Paleontologists working together…"><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor’s ACL model :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-03-29-velociraptors-acl-model-7f497575daee/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-03-29-velociraptors-acl-model-7f497575daee/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -74,4 +74,4 @@
 </code></pre><p>Is clearly a malicious query and should be blocked from the notebook (It can result in server compromise).</p><p>Velociraptor solves this by introducing a permission system. Each VQL plugin requires the caller to possess a particular permission. For example, the execve() plugin required the EXECVE permission (i.e. being allowed to run arbitrary shell commands). If the user does not have the permission, the plugin fails with an error.</p><p>Let’s look at this example more closely. I will create a user called “analystbob” and assign them the <strong>analyst</strong> role:</p><p><img src=../../img/1KzOsl3TZ2oztzDQF-c4APw.png alt></p><p>Bob is allowed to view and edit notebooks using the GUI since Bob is an analyst. Let’s see Bob creating a new notebook</p><p><img src=../../img/1Dri1UPuqRLnhmadSP5f-jQ.png alt></p><p>Bob can even issue VQL queries for post processing and filtering of collected data. However, what happens if they try to issue the malicious VQL above within a VQL notebook cell?</p><p><img src=../../img/1qOUD4kX7OGj9rlrM84y21A.png alt></p><p><img src=../../img/1AkJUHE0jH9m5ckmwxkG2aQ.png alt></p><p>Bob’s query returned no rows since the execve() plugin refused to run without the EXECVE permission, which Bob lacks.</p><p>Let’s see Bob browsing the Virtual Filesystem of an endpoint</p><p><img src=../../img/1QkdlX3Ubyb_eQhvDLnko5Q.png alt></p><p>The rest of the GUI does not allow Bob to actually collect any new data — for example the VFS view does not allow collecting new directory listing or new files (but Bob can still navigate already collected directories).</p><p>If Bob wants to collect new artifacts or perform new hunts, he will need to ask <strong>investigatoralice</strong> who has the <strong>investigator</strong> role to actually collect those. Similarly, if Bob wants to modify or implement a new artifact they will need to ask the user <strong>sue</strong> who has the <strong>artifact_writer</strong> role to be able to add the artifacts for him (Once the artifact is added, Alice can now collect it — she just can’t add it herself).</p><h3 id=artifact-permissions>Artifact permissions</h3><p>Some artifacts are more sensitive than others. For example, the <strong>Windows.System.CmdShell</strong> artifact implements the interactive shell feature. It allows arbitrary commands to be executed by the command shell on the endpoint — a very powerful artifact indeed.</p><p><img src=../../img/1lX2toda0AOVf7VOrPkW_2w.png alt></p><p>If we allowed an investigator role to run this artifact, they could easily escalate to System level access on the endpoint. Therefore we really should be limiting the permissions of users that are allowed to run this specific artifact.</p><p><img src=../../img/1L4zxgkz0Mh4OevcR70ppBg.png alt></p><p>The artifact definition itself specifies that this artifact requires the EXECVE permission. Let’s see what happens when <strong>investigatoralice</strong> attempt to collect that artifact.</p><p><img src=../../img/1zDpPBEoNCb34H9Vql8dEBQ.png alt></p><p><img src=../../img/1RcGR69bUlWh58Vf8L23W_w.png alt></p><p>Velociraptor refuses to schedule this artifact collection since alice does not have the execve permission (This is only available to administrators). Therefore only administrators can issue arbitrary commands on the endpoint.</p><p>Lets have a look at the available permissions (Permissions might evolve over time, but these are the defined permissions at this time)</p><p><figure><img src=../../img/1pbqvWfXG2Gtg-cBuWGYqVw.png alt='<a href="https://github.com/Velocidex/velociraptor/blob/master/acls/proto/acl.proto#L9">https://github.com/Velocidex/velociraptor/blob/master/acls/proto/acl.proto</a>' class=captioned><figcaption>&lt;a href="https://github.com/Velocidex/velociraptor/blob/master/acls/proto/acl.proto#L9">https://github.com/Velocidex/velociraptor/blob/master/acls/proto/acl.proto&lt;/a></figcaption></figure><em><a href=https://github.com/Velocidex/velociraptor/blob/master/acls/proto/acl.proto#L9>https://github.com/Velocidex/velociraptor/blob/master/acls/proto/acl.proto</a></em></p><h2 id=api-clients>API Clients</h2><p>We have previously shown how Velociraptor can be accessed through the API. The Velociraptor API is very simple — it simply offers a single gRPC method called <strong>Query</strong> which allows clients to run arbitrary VQL queries on the server.</p><p>Previously there was no access controls on the VQL issue by the API client, so an API client could run any VQL queries. Typically API clients are used to automate post processing of hunts and flows and so they rarely need more sophisticated permissions.</p><p>It is now possible (even required) to limit the access of API clients by assigning them specific permissions depending on the queries they typically need to run.</p><p>For example, suppose I have a python program which watches for server events so it can post process them. The program will run the query</p><pre><code>SELECT * FROM watch_monitoring(artifact=’System.Flow.Completion’)
 </code></pre><p>This program only needs the following permissions</p><ol><li><p>The <strong>any_query</strong> permission is required to issue any VQL queries</p></li><li><p>The <strong>collect_server</strong> permission is required to collect any information from the server itself (i.e. about server state).</p></li><li><p>The <strong>read_results</strong> permission is required to see any endpoint data already collected</p></li></ol><p>First I will create an API config file for this program, then grant the API client the minimum required permissions.</p><pre><code class=language-sh>velociraptor config api_client api_config.yaml --name PythonPostProcess
 velociraptor acl grant PythonPostProcess ‘{“any_query”:true,”collect_server”:true,”read_results”:true}’
-</code></pre><p>Note the <strong>acl grant</strong> command grants an ACL policy object to the specific username or API keys name. The policy object is simply a JSON encoded object with the required permission set to true.</p><p>We can now use the <a href=https://github.com/Velocidex/pyvelociraptor>pyvelociraptor</a> Python program to connect to the API and run the query.</p><p><img src=../../img/155h1dEafVJ9hnG7gdgF3hQ.png alt></p><p>Imagine if this API key was compromised and the attackers attempted to run the shell command on the server through the API. The server logs show the API call being made and then immediately a permission denied due to EXECVE permission missing. The power of the key is limited by the restricted permissions.</p><p><img src=../../img/1G6ut8fEGCu3AfbxaiMHYVg.png alt></p><h2 id=conclusions>Conclusions</h2><p>Velociraptor role based access controls allows for greater division of labor within the Velociraptor DFIR team. The roles limit the level of damage that can be done with a user account compromise.</p><p>However, we must remember still that Velociraptor is still a very privileged program with a lot of access. It is inherently difficult to predict how privilege can be escalated — after all Velociraptor collects highly sensitive forensic artifacts whose disclosure can sometime result in PII or security incidents. It is still a good idea to limit access to the Velociraptor GUI to the minimum number of people that need it, and ensure the entire team is trained at how to wield Velociraptor effectively.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><p>Note the <strong>acl grant</strong> command grants an ACL policy object to the specific username or API keys name. The policy object is simply a JSON encoded object with the required permission set to true.</p><p>We can now use the <a href=https://github.com/Velocidex/pyvelociraptor>pyvelociraptor</a> Python program to connect to the API and run the query.</p><p><img src=../../img/155h1dEafVJ9hnG7gdgF3hQ.png alt></p><p>Imagine if this API key was compromised and the attackers attempted to run the shell command on the server through the API. The server logs show the API call being made and then immediately a permission denied due to EXECVE permission missing. The power of the key is limited by the restricted permissions.</p><p><img src=../../img/1G6ut8fEGCu3AfbxaiMHYVg.png alt></p><h2 id=conclusions>Conclusions</h2><p>Velociraptor role based access controls allows for greater division of labor within the Velociraptor DFIR team. The roles limit the level of damage that can be done with a user account compromise.</p><p>However, we must remember still that Velociraptor is still a very privileged program with a lot of access. It is inherently difficult to predict how privilege can be escalated — after all Velociraptor collects highly sensitive forensic artifacts whose disclosure can sometime result in PII or security incidents. It is still a good idea to limit access to the Velociraptor GUI to the minimum number of people that need it, and ensure the entire team is trained at how to wield Velociraptor effectively.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2020/2020-04-16-velociraptor-e48a47e0317d/index.html b/blog/2020/2020-04-16-velociraptor-e48a47e0317d/index.html
index ba26fd8d0c8..93107472d82 100644
--- a/blog/2020/2020-04-16-velociraptor-e48a47e0317d/index.html
+++ b/blog/2020/2020-04-16-velociraptor-e48a47e0317d/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Digging deeper — an introduction"><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-04-16-velociraptor-e48a47e0317d/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-04-16-velociraptor-e48a47e0317d/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=top-github-link><a class=github-link title='Edit this page' href=https://github.com/Velocidex/velociraptor-docs/edit/master/content/blog/2020/2020-04-16-velociraptor-e48a47e0317d/_index.md target=blank><i class="fas fa-code-branch"></i>
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>Velociraptor</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#the-rise-of-the-endpoint-dfir-agent>The rise of the endpoint DFIR agent</a></li><li><a href=#introducing-velociraptor>Introducing Velociraptor</a></li><li><a href=#velociraptor-artifacts>Velociraptor artifacts</a></li><li><a href=#hunting-with-velociraptor>Hunting with Velociraptor</a></li><li><a href=#forensic-analysis-on-the-endpoint>Forensic analysis on the endpoint</a></li><li><a href=#searching-for-files>Searching for files</a></li><li><a href=#conclusions>Conclusions</a></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Velociraptor</h1><p><img src=../../img/0FQfmIrDiAxOjGNSO.jpg alt></p><p>This is an introductory article explaining the rationale behind Velociraptor’s design and particularly how Velociraptor evolved with some historical context compared with other DFIR tooling. We took a lot of inspiration and learned many lessons by using other great tools, and Velociraptor is our attempt at pushing the field forward.</p><p>Digital forensics is primarily focused on answering questions. Most practitioners limit their cases around high level questions, such as did the user access a particular file? Was malware run on the user’s workstation? Did an attacker crack an account?</p><p>Over the years, DFIR practitioners have developed and refined methodologies for answering such questions. For example, by examining the timestamps stored in the NTFS filesystem we are able to build a timeline tracing an intruders path through the network. These methodologies are often encoded informally in practitioners’ experience and training. Wouldn’t it be great to have a way to formally document and encode these methodologies?</p><p>In many digital evidence based cases, time is of the essence. The forensic practitioner is looking to answer questions quickly and efficiently, since the amount and size of digital evidence is increasing with every generation of new computing devices. We now see the emergence of triage techniques to quickly classify a machine as worthy of further forensic analysis. When triaging a system, the practitioner has to be surgical in their approach — examining specific artifacts before even acquiring the hard disk or memory.</p><p>Triaging is particularly prevalent in enterprise incident response. In this scenario it is rare for legal prosecution to take place, instead the enterprise is interested in quickly containing the incident and learning of possible impacts. As part of this analysis, the practitioner may need to triage many thousands of machines to find those machines who were compromised, avoiding the acquisition of bit-for-bit forensically sound images.</p><h2 id=the-rise-of-the-endpoint-dfir-agent>The rise of the endpoint DFIR agent</h2><p>This transition from traditional forensic techniques to highly scalable distributed analysis has resulted in multiple offering of endpoint agents. An agent is specialized software running on enterprise endpoints providing forensic analysis and telemetry to central servers. This architectures enables detection of attackers from different endpoints as they traverse through the network and provides a more distributed detection coverage for more assets simultaneously.</p><p>One of the first notable endpoint agents was <a href=https://github.com/google/grr>GRR</a>, a Google internal project open sourced around 2012. GRR is an agent installed on many endpoints controlled by a central server. The agent is able to perform some low level forensic analysis by incorporating other open source tools such as the <a href=https://www.sleuthkit.org/>Sleuthkit</a> and <a href=http://www.rekall-forensic.com/>The Rekall Memory forensic suite</a>. The GRR framework was one of the first to offer the concept of hunting — actively seeking forensic anomalies on many endpoints at the same time. For the first time, analysts could pose a question — such as “Which endpoints contain this registry key”, to thousands of endpoints at once, and receive an answer within hours.</p><p>Hunting is particularly useful for rapid triaging — we can focus our attention only on those machines which show potential signs of compromise. GRR also provides interactive remote access to the endpoint, allowing for user inspection of the endpoint (such as interactively examining files, directories and registry keys).</p><p>As useful as GRR’s approach was at the time, there were some shortfalls, mainly around lack of flexibility and limited scale and performance. GRR features are built into the agent making it difficult to rapidly push new code updates or new capabilities in response to changing needs. It is also difficult to control the amount of data transferred from the endpoint which often ends up being much too detailed than necessary, leading to performance issues on the server.</p><p>The next breakthrough in the field was the release of <a href=https://osquery.io/>Facebook’s OSQuery</a>. This revolutionary tool allows one to query the endpoints using a SQL like syntax query. By querying the endpoint, it is possible to adapt the results sent, apply arbitrary filtering and combine different modules in new creative ways. OSQuery’s approach proved to be very flexible in the rapidly evolving stages of incident response, where users need to modify their queries rapidly in response to emerging needs.</p><h2 id=introducing-velociraptor>Introducing Velociraptor</h2><p>Learning from these early projects, <a href=https://github.com/Velocidex/velociraptor>Velociraptor</a> was released in 2019. Similar to GRR, Velociraptor also allows for hunting across many thousands of machines. Inspired by OSQuery, Velociraptor implements a new query language dubbed VQL (Velociraptor Query Language) which is similar to SQL but extends the query language in a more powerful way. Velociraptor also emphasizes ease of installation and very low latency — typically collecting artifacts from thousands of endpoints in a matter of seconds.</p><p><img src=../../img/0PCWOhCGjc7eeNXig alt></p><p><strong>Figure 1</strong> above shows an overview of the Velociraptor architecture. The Velociraptor server maintains communications with the endpoint agents (called Clients) for command and control. The web based administration user interface is used to task individual clients, run hunts and collect data.</p><p>Ultimately, Velociraptor agents are simply VQL engines — all tasks to the agent are simply VQL queries that the engine executes. VQL queries, just like database queries, result in a table, with columns (as dictated by the query) and multiple rows. The agent will execute the query, and send back the results to the server which simply stores them as files. This approach means the server is not really processing the results other than just storing them in files. Therefore the load on the server is minimal allowing for vastly scalable performance.</p><h2 id=velociraptor-artifacts>Velociraptor artifacts</h2><p>Writing free-form queries is a powerful tool, but from a user experience perspective, it is not ideal. Users will need to remember potentially complex queries. Velociraptor solves this by implementing “<a href=https://www.velocidex.com/docs/artifacts/>**Artifacts</a>**”. An artifact is a text file written in YAML which encapsulates the VQL, adds some human readable descriptions and provides some parameters allowing users to customize the operation of the artifact to some extent.</p><p>As an example of this process, we consider the <a href=https://docs.microsoft.com/en-us/windows/win32/taskschd/task-scheduler-start-page>Windows Scheduled Tasks</a>. These tasks are often added by attackers as a way of gaining persistence and a backdoor to a compromised system (See Att&amp;ck Matrix <a href=https://attack.mitre.org/techniques/T1053/>T1053</a>). Velociraptor can collect and analyse these tasks if provided with the appropriate VQL query. By writing the query into an artifact we make it possible for other users to simply re-use our VQL.</p><p><img src=../../img/0ZUoUfr0Mk8LOSn_Z alt></p><p><strong>Figure 2</strong> shows the <strong>Windows.System.TaskScheduler</strong> artifact as viewed in the GUI. The artifact contains some user readable background information, parameters and the VQL source. As <strong>Figure 3</strong> below shows, in the GUI, one simply needs to search for the scheduled tasks artifact, select it and collect it from the endpoint.</p><p><img src=../../img/000bPLfksaHxbLxxp alt></p><p>As soon as we issue the collection request, the client will run the VQL query, and send the result to the server within seconds. If the agent is not online at the time of the query, the task will be queued on the server until the endpoint comes back online, at which time the artifact will be collected immediately.</p><p><img src=../../img/027ICJSb6akkcUGoL alt></p><p><strong>Figure 4</strong> shows the result of this collection. We see the agent took 5 seconds to upload the 180 scheduled task XML files, which took a total of 5.7mb. We can click the “<strong>Prepare Download</strong>” button now to prepare a zip file containing these files for export. We can then download the Zip file through the GUI and store it as evidence as required.</p><p><img src=../../img/08NHoafuoVUvkN5i1 alt></p><p><strong>Figure 5</strong> shows the results from this artifact. The VQL query also instructed the endpoint to parse the XML files on the endpoint and extract the launched command directly. It is now possible to quickly triage all the scheduled tasks looking for unusual or suspicious tasks. The exported Zip file will also contain the CSV files produced by this analysis and can be processed using any tool that supports CSV formatted data (e.g. Excel, MySQL or Elastic through Logstash).</p><h2 id=hunting-with-velociraptor>Hunting with Velociraptor</h2><p>Continuing our example of scheduled tasks, we now wish to hunt for these across the entire enterprise. This captures the state of the deployment at a point in time when the hunt was collected and allows us to go back and see which new scheduled tasks appeared at a later point in time.</p><p>Hunting is simply a way to collect the same artifact from many machines at the same time. The GUI simply packages the results from these collections into a single exported file.</p><p><img src=../../img/099cPv4K_gBkZ2-CL alt></p><p><strong>Figure 7</strong> shows a hunt created to collect the <strong>Windows.System.TaskScheduler</strong> artifact. We can see the total number of clients scheduled and completed and that the hunt will expire in one week. If new machines appear within this time, they will also have that artifact collected. Finally we can prepare an export zip file for download that contains all the client’s collected artifacts.</p><h2 id=forensic-analysis-on-the-endpoint>Forensic analysis on the endpoint</h2><p>To be really effective, Velociraptor implements many forensic capabilities directly on the endpoint. This allows for writing artifacts that can leverage this analysis, either in a surgical way — identifying directly the relevant data, or in order to enrich the results by automatically providing more context to the analyst. In this section we examine some of these common use cases and see how they can be leveraged through use of artifacts.</p><h2 id=searching-for-files>Searching for files</h2><p>A common task for analysts is to search for particular filenames. For example, in a drive by download or phishing email case, we already know in advance the name of the dropped file and we simply want to know if the file exists on any of our endpoints.</p><p>The <strong>Windows.Search.FileFinder</strong> artifact is designed to search for various files by filename. <strong>Figure 8</strong> below illustrates the parameters that can be used to customize the collection. For a typical drive-by download, we might want to search for all binaries downloaded recently within the user’s home directories. We can also collect matching files centrally to further analyse those binaries. The artifact also allows us to filter by keywords appearing within file contents.</p><p><img src=../../img/0lxWTbRpxhE7iGO51 alt></p><p><img src=../../img/0a7nLLP77dcFHcjPl alt></p><p>Searching for files is a very common operation which covers many of the common use cases, but it is limited to finding files that are not currently deleted. Velociraptor also includes a complete NTFS filesystem parser available through a VQL plugin. This allows us to extract low level information from every MFT entry.</p><p><img src=../../img/0OzrfX5m7eKMFw5xQ alt></p><p>**Figure 10 **shows a sample of this output. We can see details like the <strong>FILE_NAME</strong> timestamps, as well as the <strong>STANDARD_INFORMATION</strong> stream timestamps (useful for detecting time stomping).</p><p><img src=../../img/0hLC9MjRTfcS3MmyZ alt></p><p>While the <strong>Windows.NTFS.MFT</strong> artifact dumps all MFT entries from the endpoint, we can make this more surgical and specifically search for deleted executables. To do this we would need to modify the VQL query to add an additional filter.</p><p>Modifying or customizing an artifact is easy to do through the GUI. Simply search for the artifact in the “<strong>View Artifacts</strong>” screen, and then click the <strong>“Modify Artifact”</strong> button to bring up an editor allowing the YAML to be directly edited (Note that all customized artifacts, automatically receive the prefix “<strong>Custom</strong>” in their name setting them apart from curated artifacts).</p><p><img src=../../img/0lVGMD5SpsDzt9beg alt></p><p>In the figure above we added the condition <strong>“WHERE FileName =~ ‘.exe$’ AND NOT InUse”</strong> to restrict output only to deleted executables. We now select this customized version and collect it on the endpoint as before. Since we have filtered only those executables which are deleted in this query, the result set is much smaller and somewhat quicker to calculate. <strong>Figure 11</strong> below shows a single binary was found on our test system still recoverable in unused MFT entry.</p><p><img src=../../img/0PVnSNZXUSeVkdoLy alt></p><p><strong>Figure 11</strong> shows an MFT entry for a binary that had been removed from disk. If we are lucky we can attempt to recover the deleted file using the **Windows.NTFS.Recover **artifact. This artifact simply dumps out all the attribute streams from the specified MFT entry (including the <strong>$DATA</strong> attribute) and uploads them to the server. <strong>Figure 12</strong> below shows how we can select to collect this artifact, and specify the MFT entry reported in the previous collection as a parameter to the artifact.</p><p><img src=../../img/0lhzQN2pP4LOM-rqD alt></p><p><img src=../../img/0CcdK7p9p5vWog0ms alt></p><p><strong>Figure 13</strong> shows the output from the **Windows.NTFS.Recover **artifact, showing the **$DATA **stream was correctly recovered as verified by its hash.</p><p>The previous example demonstrates how having advanced forensic analysis capabilities is valuable during endpoint monitoring. The example of a drive by download required us confirming if a particular executable is present on any of our endpoints. We started off by performing a simple filename search for executables. But realizing this will only yield currently existing files, we move onto deep level NTFS analysis dumping all MFT entry information. We then modified the VQL query to restrict the output to only the subset of results of interest in our case.</p><p>This modified query can now run as a hunt on the entire fleet to determine which executables have recently been deleted anywhere, which would confirm if the malware was run on other machines we are not aware of. We can then potentially use NTFS recovery techniques to recover the binary for further analysis. Without the flexibility of the powerful Velociraptor Query Language it would be difficult to adapt to such a fluid and rapidly developing incident.</p><h2 id=conclusions>Conclusions</h2><p>Velociraptor includes many other low level analysis modules, such as parsing prefetch files, raw registry access (for <a href=https://www.andreafortuna.org/2017/10/16/amcache-and-shimcache-in-forensic-analysis/><code>AMCache</code> </a>analysis), <a href=https://en.wikipedia.org/wiki/Extensible_Storage_Engine>ESE database</a> parser (facilitating <a href=https://www.sans.org/cyber-security-summit/archives/file/summit_archive_1492184583.pdf>SRUM database forensics</a> and Internet Explorer history analysis), <a href=https://www.sqlite.org/>SQLite</a> parsers (for Chrome and Firefox history) and much more.</p><p>The true power of Velociraptor is in combining these low level modules with other VQL queries to further enrich the output or narrow down queries making them more surgical and reducing the amount of false positives. This more targeted approach is critical when hunting at scale in order to reduce the amount of data collected and assist the operator in focusing on the truly important evidence quickly and efficiently.</p><p>The type of analysis performed is driven by a flexible VQL query, written into an artifact by the user. This unprecedented level of flexibility and scale in a forensic tool allows for flexible and novel response and collection. It is really only limited by the imagination of the user.</p><p>We opened this article by imagining a world where experienced forensic practitioners could transfer and encode their knowledge and experience into actionable artifacts. Velociraptor’s artifacts help to bring this vision to life — allowing experienced users to encode their workflow in VQL artifacts opens these techniques up to be used by other practitioners in a more consistent and automated fashion. We hope to inspire a vibrant community of VQL Artifact authors to facilitate exchange of experience, techniques and approaches between practitioners and researchers alike.</p><p>Velociraptor is available under an open source license on <a href=https://github.com/Velocidex/velociraptor>GitHub</a>. You can download the latest Velociraptor release and use it immediately, or clone the source repository and contribute to the project. You can also contribute VQL snippets or artifacts directly to the project in order to share commonly used artifacts with the larger community.</p><div class="mynotices tip"><div heading=tip><p>About the author: Mike Cohen is a digital forensic researcher and senior software engineer. He has supported leading open-source DFIR projects including as a core developer of Volatility and lead developer of both Rekall and Google’s Grr Rapid Response. Mike has founded Velocidex in 2018 after working at Google for the previous 8 years in developing cutting edge DFIR tools. Velocidex is the company behind the Velociraptor open source endpoint visibility tool.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<span class=links>Velociraptor</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#the-rise-of-the-endpoint-dfir-agent>The rise of the endpoint DFIR agent</a></li><li><a href=#introducing-velociraptor>Introducing Velociraptor</a></li><li><a href=#velociraptor-artifacts>Velociraptor artifacts</a></li><li><a href=#hunting-with-velociraptor>Hunting with Velociraptor</a></li><li><a href=#forensic-analysis-on-the-endpoint>Forensic analysis on the endpoint</a></li><li><a href=#searching-for-files>Searching for files</a></li><li><a href=#conclusions>Conclusions</a></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Velociraptor</h1><p><img src=../../img/0FQfmIrDiAxOjGNSO.jpg alt></p><p>This is an introductory article explaining the rationale behind Velociraptor’s design and particularly how Velociraptor evolved with some historical context compared with other DFIR tooling. We took a lot of inspiration and learned many lessons by using other great tools, and Velociraptor is our attempt at pushing the field forward.</p><p>Digital forensics is primarily focused on answering questions. Most practitioners limit their cases around high level questions, such as did the user access a particular file? Was malware run on the user’s workstation? Did an attacker crack an account?</p><p>Over the years, DFIR practitioners have developed and refined methodologies for answering such questions. For example, by examining the timestamps stored in the NTFS filesystem we are able to build a timeline tracing an intruders path through the network. These methodologies are often encoded informally in practitioners’ experience and training. Wouldn’t it be great to have a way to formally document and encode these methodologies?</p><p>In many digital evidence based cases, time is of the essence. The forensic practitioner is looking to answer questions quickly and efficiently, since the amount and size of digital evidence is increasing with every generation of new computing devices. We now see the emergence of triage techniques to quickly classify a machine as worthy of further forensic analysis. When triaging a system, the practitioner has to be surgical in their approach — examining specific artifacts before even acquiring the hard disk or memory.</p><p>Triaging is particularly prevalent in enterprise incident response. In this scenario it is rare for legal prosecution to take place, instead the enterprise is interested in quickly containing the incident and learning of possible impacts. As part of this analysis, the practitioner may need to triage many thousands of machines to find those machines who were compromised, avoiding the acquisition of bit-for-bit forensically sound images.</p><h2 id=the-rise-of-the-endpoint-dfir-agent>The rise of the endpoint DFIR agent</h2><p>This transition from traditional forensic techniques to highly scalable distributed analysis has resulted in multiple offering of endpoint agents. An agent is specialized software running on enterprise endpoints providing forensic analysis and telemetry to central servers. This architectures enables detection of attackers from different endpoints as they traverse through the network and provides a more distributed detection coverage for more assets simultaneously.</p><p>One of the first notable endpoint agents was <a href=https://github.com/google/grr>GRR</a>, a Google internal project open sourced around 2012. GRR is an agent installed on many endpoints controlled by a central server. The agent is able to perform some low level forensic analysis by incorporating other open source tools such as the <a href=https://www.sleuthkit.org/>Sleuthkit</a> and <a href=http://www.rekall-forensic.com/>The Rekall Memory forensic suite</a>. The GRR framework was one of the first to offer the concept of hunting — actively seeking forensic anomalies on many endpoints at the same time. For the first time, analysts could pose a question — such as “Which endpoints contain this registry key”, to thousands of endpoints at once, and receive an answer within hours.</p><p>Hunting is particularly useful for rapid triaging — we can focus our attention only on those machines which show potential signs of compromise. GRR also provides interactive remote access to the endpoint, allowing for user inspection of the endpoint (such as interactively examining files, directories and registry keys).</p><p>As useful as GRR’s approach was at the time, there were some shortfalls, mainly around lack of flexibility and limited scale and performance. GRR features are built into the agent making it difficult to rapidly push new code updates or new capabilities in response to changing needs. It is also difficult to control the amount of data transferred from the endpoint which often ends up being much too detailed than necessary, leading to performance issues on the server.</p><p>The next breakthrough in the field was the release of <a href=https://osquery.io/>Facebook’s OSQuery</a>. This revolutionary tool allows one to query the endpoints using a SQL like syntax query. By querying the endpoint, it is possible to adapt the results sent, apply arbitrary filtering and combine different modules in new creative ways. OSQuery’s approach proved to be very flexible in the rapidly evolving stages of incident response, where users need to modify their queries rapidly in response to emerging needs.</p><h2 id=introducing-velociraptor>Introducing Velociraptor</h2><p>Learning from these early projects, <a href=https://github.com/Velocidex/velociraptor>Velociraptor</a> was released in 2019. Similar to GRR, Velociraptor also allows for hunting across many thousands of machines. Inspired by OSQuery, Velociraptor implements a new query language dubbed VQL (Velociraptor Query Language) which is similar to SQL but extends the query language in a more powerful way. Velociraptor also emphasizes ease of installation and very low latency — typically collecting artifacts from thousands of endpoints in a matter of seconds.</p><p><img src=../../img/0PCWOhCGjc7eeNXig alt></p><p><strong>Figure 1</strong> above shows an overview of the Velociraptor architecture. The Velociraptor server maintains communications with the endpoint agents (called Clients) for command and control. The web based administration user interface is used to task individual clients, run hunts and collect data.</p><p>Ultimately, Velociraptor agents are simply VQL engines — all tasks to the agent are simply VQL queries that the engine executes. VQL queries, just like database queries, result in a table, with columns (as dictated by the query) and multiple rows. The agent will execute the query, and send back the results to the server which simply stores them as files. This approach means the server is not really processing the results other than just storing them in files. Therefore the load on the server is minimal allowing for vastly scalable performance.</p><h2 id=velociraptor-artifacts>Velociraptor artifacts</h2><p>Writing free-form queries is a powerful tool, but from a user experience perspective, it is not ideal. Users will need to remember potentially complex queries. Velociraptor solves this by implementing “<a href=https://www.velocidex.com/docs/artifacts/>**Artifacts</a>**”. An artifact is a text file written in YAML which encapsulates the VQL, adds some human readable descriptions and provides some parameters allowing users to customize the operation of the artifact to some extent.</p><p>As an example of this process, we consider the <a href=https://docs.microsoft.com/en-us/windows/win32/taskschd/task-scheduler-start-page>Windows Scheduled Tasks</a>. These tasks are often added by attackers as a way of gaining persistence and a backdoor to a compromised system (See Att&amp;ck Matrix <a href=https://attack.mitre.org/techniques/T1053/>T1053</a>). Velociraptor can collect and analyse these tasks if provided with the appropriate VQL query. By writing the query into an artifact we make it possible for other users to simply re-use our VQL.</p><p><img src=../../img/0ZUoUfr0Mk8LOSn_Z alt></p><p><strong>Figure 2</strong> shows the <strong>Windows.System.TaskScheduler</strong> artifact as viewed in the GUI. The artifact contains some user readable background information, parameters and the VQL source. As <strong>Figure 3</strong> below shows, in the GUI, one simply needs to search for the scheduled tasks artifact, select it and collect it from the endpoint.</p><p><img src=../../img/000bPLfksaHxbLxxp alt></p><p>As soon as we issue the collection request, the client will run the VQL query, and send the result to the server within seconds. If the agent is not online at the time of the query, the task will be queued on the server until the endpoint comes back online, at which time the artifact will be collected immediately.</p><p><img src=../../img/027ICJSb6akkcUGoL alt></p><p><strong>Figure 4</strong> shows the result of this collection. We see the agent took 5 seconds to upload the 180 scheduled task XML files, which took a total of 5.7mb. We can click the “<strong>Prepare Download</strong>” button now to prepare a zip file containing these files for export. We can then download the Zip file through the GUI and store it as evidence as required.</p><p><img src=../../img/08NHoafuoVUvkN5i1 alt></p><p><strong>Figure 5</strong> shows the results from this artifact. The VQL query also instructed the endpoint to parse the XML files on the endpoint and extract the launched command directly. It is now possible to quickly triage all the scheduled tasks looking for unusual or suspicious tasks. The exported Zip file will also contain the CSV files produced by this analysis and can be processed using any tool that supports CSV formatted data (e.g. Excel, MySQL or Elastic through Logstash).</p><h2 id=hunting-with-velociraptor>Hunting with Velociraptor</h2><p>Continuing our example of scheduled tasks, we now wish to hunt for these across the entire enterprise. This captures the state of the deployment at a point in time when the hunt was collected and allows us to go back and see which new scheduled tasks appeared at a later point in time.</p><p>Hunting is simply a way to collect the same artifact from many machines at the same time. The GUI simply packages the results from these collections into a single exported file.</p><p><img src=../../img/099cPv4K_gBkZ2-CL alt></p><p><strong>Figure 7</strong> shows a hunt created to collect the <strong>Windows.System.TaskScheduler</strong> artifact. We can see the total number of clients scheduled and completed and that the hunt will expire in one week. If new machines appear within this time, they will also have that artifact collected. Finally we can prepare an export zip file for download that contains all the client’s collected artifacts.</p><h2 id=forensic-analysis-on-the-endpoint>Forensic analysis on the endpoint</h2><p>To be really effective, Velociraptor implements many forensic capabilities directly on the endpoint. This allows for writing artifacts that can leverage this analysis, either in a surgical way — identifying directly the relevant data, or in order to enrich the results by automatically providing more context to the analyst. In this section we examine some of these common use cases and see how they can be leveraged through use of artifacts.</p><h2 id=searching-for-files>Searching for files</h2><p>A common task for analysts is to search for particular filenames. For example, in a drive by download or phishing email case, we already know in advance the name of the dropped file and we simply want to know if the file exists on any of our endpoints.</p><p>The <strong>Windows.Search.FileFinder</strong> artifact is designed to search for various files by filename. <strong>Figure 8</strong> below illustrates the parameters that can be used to customize the collection. For a typical drive-by download, we might want to search for all binaries downloaded recently within the user’s home directories. We can also collect matching files centrally to further analyse those binaries. The artifact also allows us to filter by keywords appearing within file contents.</p><p><img src=../../img/0lxWTbRpxhE7iGO51 alt></p><p><img src=../../img/0a7nLLP77dcFHcjPl alt></p><p>Searching for files is a very common operation which covers many of the common use cases, but it is limited to finding files that are not currently deleted. Velociraptor also includes a complete NTFS filesystem parser available through a VQL plugin. This allows us to extract low level information from every MFT entry.</p><p><img src=../../img/0OzrfX5m7eKMFw5xQ alt></p><p>**Figure 10 **shows a sample of this output. We can see details like the <strong>FILE_NAME</strong> timestamps, as well as the <strong>STANDARD_INFORMATION</strong> stream timestamps (useful for detecting time stomping).</p><p><img src=../../img/0hLC9MjRTfcS3MmyZ alt></p><p>While the <strong>Windows.NTFS.MFT</strong> artifact dumps all MFT entries from the endpoint, we can make this more surgical and specifically search for deleted executables. To do this we would need to modify the VQL query to add an additional filter.</p><p>Modifying or customizing an artifact is easy to do through the GUI. Simply search for the artifact in the “<strong>View Artifacts</strong>” screen, and then click the <strong>“Modify Artifact”</strong> button to bring up an editor allowing the YAML to be directly edited (Note that all customized artifacts, automatically receive the prefix “<strong>Custom</strong>” in their name setting them apart from curated artifacts).</p><p><img src=../../img/0lVGMD5SpsDzt9beg alt></p><p>In the figure above we added the condition <strong>“WHERE FileName =~ ‘.exe$’ AND NOT InUse”</strong> to restrict output only to deleted executables. We now select this customized version and collect it on the endpoint as before. Since we have filtered only those executables which are deleted in this query, the result set is much smaller and somewhat quicker to calculate. <strong>Figure 11</strong> below shows a single binary was found on our test system still recoverable in unused MFT entry.</p><p><img src=../../img/0PVnSNZXUSeVkdoLy alt></p><p><strong>Figure 11</strong> shows an MFT entry for a binary that had been removed from disk. If we are lucky we can attempt to recover the deleted file using the **Windows.NTFS.Recover **artifact. This artifact simply dumps out all the attribute streams from the specified MFT entry (including the <strong>$DATA</strong> attribute) and uploads them to the server. <strong>Figure 12</strong> below shows how we can select to collect this artifact, and specify the MFT entry reported in the previous collection as a parameter to the artifact.</p><p><img src=../../img/0lhzQN2pP4LOM-rqD alt></p><p><img src=../../img/0CcdK7p9p5vWog0ms alt></p><p><strong>Figure 13</strong> shows the output from the **Windows.NTFS.Recover **artifact, showing the **$DATA **stream was correctly recovered as verified by its hash.</p><p>The previous example demonstrates how having advanced forensic analysis capabilities is valuable during endpoint monitoring. The example of a drive by download required us confirming if a particular executable is present on any of our endpoints. We started off by performing a simple filename search for executables. But realizing this will only yield currently existing files, we move onto deep level NTFS analysis dumping all MFT entry information. We then modified the VQL query to restrict the output to only the subset of results of interest in our case.</p><p>This modified query can now run as a hunt on the entire fleet to determine which executables have recently been deleted anywhere, which would confirm if the malware was run on other machines we are not aware of. We can then potentially use NTFS recovery techniques to recover the binary for further analysis. Without the flexibility of the powerful Velociraptor Query Language it would be difficult to adapt to such a fluid and rapidly developing incident.</p><h2 id=conclusions>Conclusions</h2><p>Velociraptor includes many other low level analysis modules, such as parsing prefetch files, raw registry access (for <a href=https://www.andreafortuna.org/2017/10/16/amcache-and-shimcache-in-forensic-analysis/><code>AMCache</code> </a>analysis), <a href=https://en.wikipedia.org/wiki/Extensible_Storage_Engine>ESE database</a> parser (facilitating <a href=https://www.sans.org/cyber-security-summit/archives/file/summit_archive_1492184583.pdf>SRUM database forensics</a> and Internet Explorer history analysis), <a href=https://www.sqlite.org/>SQLite</a> parsers (for Chrome and Firefox history) and much more.</p><p>The true power of Velociraptor is in combining these low level modules with other VQL queries to further enrich the output or narrow down queries making them more surgical and reducing the amount of false positives. This more targeted approach is critical when hunting at scale in order to reduce the amount of data collected and assist the operator in focusing on the truly important evidence quickly and efficiently.</p><p>The type of analysis performed is driven by a flexible VQL query, written into an artifact by the user. This unprecedented level of flexibility and scale in a forensic tool allows for flexible and novel response and collection. It is really only limited by the imagination of the user.</p><p>We opened this article by imagining a world where experienced forensic practitioners could transfer and encode their knowledge and experience into actionable artifacts. Velociraptor’s artifacts help to bring this vision to life — allowing experienced users to encode their workflow in VQL artifacts opens these techniques up to be used by other practitioners in a more consistent and automated fashion. We hope to inspire a vibrant community of VQL Artifact authors to facilitate exchange of experience, techniques and approaches between practitioners and researchers alike.</p><p>Velociraptor is available under an open source license on <a href=https://github.com/Velocidex/velociraptor>GitHub</a>. You can download the latest Velociraptor release and use it immediately, or clone the source repository and contribute to the project. You can also contribute VQL snippets or artifacts directly to the project in order to share commonly used artifacts with the larger community.</p><div class="mynotices tip"><div heading=tip><p>About the author: Mike Cohen is a digital forensic researcher and senior software engineer. He has supported leading open-source DFIR projects including as a core developer of Volatility and lead developer of both Rekall and Google’s Grr Rapid Response. Mike has founded Velocidex in 2018 after working at Google for the previous 8 years in developing cutting edge DFIR tools. Velocidex is the company behind the Velociraptor open source endpoint visibility tool.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2020/2020-06-14-the-velociraptor-query-language-pt-1-d721bff100bf/index.html b/blog/2020/2020-06-14-the-velociraptor-query-language-pt-1-d721bff100bf/index.html
index eeb70dce9b7..9b8829d8e96 100644
--- a/blog/2020/2020-06-14-the-velociraptor-query-language-pt-1-d721bff100bf/index.html
+++ b/blog/2020/2020-06-14-the-velociraptor-query-language-pt-1-d721bff100bf/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Asking questions — Getting answers!"><link rel=icon href=/images/favicon.png type=image/png><title>The Velociraptor Query Language Pt 1 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-06-14-the-velociraptor-query-language-pt-1-d721bff100bf/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-06-14-the-velociraptor-query-language-pt-1-d721bff100bf/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>The Velociraptor Query Language Pt 1</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><ul><li><a href=#why-a-query-language>Why a query language?</a></li><li><a href=#velociraptor-notebooks>Velociraptor Notebooks</a></li><li><a href=#vql-basics>VQL Basics</a></li><li><a href=#lazy-vql>Lazy VQL</a></li><li><a href=#using-laziness-in-practice>Using laziness in practice</a></li></ul></li><li><a href=#conclusion>Conclusion</a></li></ul></nav></div></div></div></div><div id=head-tags><div class=tags><a class=tag-link href=/tags/vql>VQL</a>
 <a class=tag-link href=/tags/low-level>Low level</a></div></div><div id=body-inner><h1>The Velociraptor Query Language Pt 1</h1><p><img src=../../img/14hy_vlttNoFFf-sr_Ei0tw.jpeg alt></p><p>Velociraptor’s query language is central to the operation of Velociraptor. We find it being used in querying endpoints, collecting forensic artifacts and endpoint state and even in post processing data on the server.</p><div class="mynotices note"><div heading=note><p>Velociraptor is ultimately just a VQL query evaluation engine!</p></div></div><p>Why should you know more about VQL? Users do not actually need to know VQL to simply collect DFIR artifacts from endpoints, hunt for malware or remediate an infection. The Velociraptor GUI is powerful and provides expert DFIR knowledge at the tip of your fingerprints through built in and community contributed artifact definitions.</p><p>However being proficient in VQL will allow you to be able to write custom artifacts, post process data and adapt quickly to changing requirements during a fluid incident response exercise. You will also be able to understand, modify or adapt existing artifacts to your changing needs or to handle new evidence sources.</p><p>This is the first of a series of articles about the VQL query language. I hope this series will inspire you to develop and contribute new artifacts to this open source project — to the benefit of all members of the community.</p><h3 id=why-a-query-language>Why a query language?</h3><p>Before we start, let&rsquo;s discuss why would we want a query language in an endpoint visibility and monitoring tool, such as Velociraptor.</p><p>In practice, the DFIR process is very fluid — sometimes we don&rsquo;t know in advance what we would encounter. We need a way to rapidly and flexibly deploy new hunting techniques and algorithms in order to responds to the dynamic nature of IR.</p><p>There are a number of other DFIR tools that do not feature a rich query language — but they all provide some method of dynamically adding code to the endpoint. For example <a href=https://github.com/google/grr>GRR</a> supports “Python Hacks” to run arbitrary code at the endpoint, <a href=https://www.tanium.com/>Tanium</a> supports running scripts and<a href=https://www.carbonblack.com/> Carbon Black </a>allows running arbitrary commands using an API. All these methods cater for dynamic and flexible response.</p><p><a href=https://osquery.io/>OSQuery</a> was the first tool to offer SQL as a query language for accessing endpoint state. This is really powerful and is probably the most similar tool to Velociraptor’s VQL. So in this article we will often highlight similarities and differences between Velociraptor’s VQL and OSQuery’s SQL.</p><h3 id=velociraptor-notebooks>Velociraptor Notebooks</h3><p>In the articles in this series, we will be working with the Velociraptor notebook. The notebook is a way to collaborate with many investigators in the course of a DFIR investigation using a shared document consisting of cells (think of it like a Google docs for DFIR!).</p><p>If you want to follow along this article, you should install the Velociraptor frontend locally (simply generate a simple local config using velociraptor config generate -i and start the frontend using velociraptor.exe &ndash;config server.config.yaml frontend -v.</p><p>Start a new notebook by selecting the notebook in the sidebar then add a new notebook. Provide a title and description and then add a new VQL cell.</p><p><img src=../../img/1IaE_YYFXGqDIOXuxZa8dWQ.png alt></p><p>Notebooks consists of a series of <strong>Cells</strong>. There are a number of types of cells but the most common are <strong>Markdown</strong> Cells and <strong>VQL</strong> cells. VQL cells allow one to run arbitrary VQL directly within the notebook, and view the results in a table.</p><p>When you create a new notebook, the first cell will be of type markdown. You can add a VQL cell below that by simply selecting Add VQL cell from the toolbar.</p><p><img src=../../img/1bqFDmsEFrvkpE8BGmMi2Tg.png alt></p><p>A VQL cell allows one to simply write VQL queries into the notebook. Note that VQL queries in the notebook are actually running on the server itself. It is therefore possible to control and automate the server using VQL (we will see this in a later article).</p><p>For now simply write the following query and click the save icon.</p><pre><code class=language-vql>SELECT * FROM info()
-</code></pre><p><img src=../../img/1VIwIVaEUGr16yQlEUy-K9A.png alt></p><p>When you finish writing your VQL query, click the “Save” button to update the notebook cell and recalculate the table.</p><p>You have just written your first VQL query!</p><p>One important thing to note is that the output of a query is always a table. The GUI will render the table in the VQL cell. The table will always return a sequence of rows, each row being a simple collection of columns. You can think of a row as simply a python dictionary with keys being the column names and values being arbitrary objects.</p><h3 id=vql-basics>VQL Basics</h3><p>VQL was designed to be easy to use and simple to understand. It is also based on SQL but does not support more complex SQL constructs like joins. The basic statement in VQL looks like this:</p><p><img src=../../img/1lkLMfTJJDPVUtw1fsBPUEQ.png alt></p><p>VQL queries start with the SELECT keyword, and are then followed by a list of “Column Selectors” which specify the columns that will be emitted. A VQL query can also have a WHERE clause — representing a filter which the row must pass before it is emitted.</p><p>One of the biggest differences between VQL and SQL is the use of parameters given to plugins. SQL was designed to operate on static data tables, however, in VQL, data sources are not static — they are actually plugins which generate rows when called (for example <em>pslist()</em> is a plugin which returns one process per row).</p><p>Since plugins run code, it makes sense that they would accept arguments just like functions. Therefore in VQL plugins receive keyword arguments. VQL does not support positional arguments — all arguments are named. In the GUI pressing “?” inside a plugin will suggest all the keywords the plugin accepts so it is really easy to find the names for a plugin’s arguments.</p><p><img src=../../img/1LhnuM1rFwDIhJelj4wN2AA.png alt></p><p>VQL Plugins generate rows, but what exactly is a row? Unlike SQL which deals with simple data types, a VQL row can be thought of as a mapping (i.e. python dictionary or a JSON object) where keys are the column names, and values can take on simple types like integers, strings, as well as complex types like other objects, timestamps etc.</p><p>You can see the raw data for each row in the table by clicking the “Show Raw JSON” button (Looks like binoculars) in the table GUI. For example, for the above query we can see the raw data as below.</p><p><img src=../../img/1qCKk06PkMDt79-X9Vu8K8Q.png alt></p><p>In our case the <strong>info()</strong> plugin generated a single row with information about the running platform. The raw data consists of a list of JSON objects — each object represents a single row. Rows have column names and each column may contain different data.</p><h3 id=lazy-vql>Lazy VQL</h3><p>One interesting aspect of VQL is lazy evaluation. Since VQL functions can be expensive or have side effects it is important to understand how they are evaluated. In the following discussion we will illustrate this by use of the <strong>log()</strong> VQL function — this function simply emits a logging message (you can think of it as the VQL equivalent of <strong>print</strong>).</p><p>Let us modify the above query to simply log a simple message “I ran!”</p><p><img src=../../img/1-k1KllnlrUkKBgiLO3FvvQ.png alt></p><p>The GUI renders query logs in red under the table. As we can see the log() function evaluated to <strong>true</strong> and a side effect was logging a message.</p><p>It is best to understand how lazy evaluation works by looking at examples. Consider the following example:</p><p><img src=../../img/10XsMrQaOdDrFlzUH-LPjqw.png alt></p><p>In this query we add another column to the output of the info() plugin called “Log” which contains the **log() **function. We then use this column in the WHERE clause. Since the log() function always returns true, the row will pass the filter and be emitted, as well as a log message printed.</p><p>What happens however, if the row is filtered out? Let us change this query to be filtered only if the OS is windows (this query is running on Linux).</p><p><img src=../../img/1-k3j8cbSXKjB-RLQcBgYew.png alt></p><p>Since no rows are emitted, the log() function is never evaluated! Therefore we got no logging message. Notice how the log() function is evaluated lazily — since the output is not needed since the row is filtered out.</p><p>Let’s now change the query to consider the Log column in the WHERE clause</p><p><img src=../../img/1d0mjp1CUCjGbwuj8NB25Lw.png alt></p><p>Because the WHERE clause needs to evaluate the column “Log” the log() function will be evaluated first — even though the row is ultimately eliminated, we still receive a log message!</p><p>VQL evaluates a logical expression in a lazy manner — the left hand side of the AND clause is evaluated, and if true the right hand side is evaluated.</p><p>Let’s swap the order of the AND clause</p><p><img src=../../img/12NQXdVa7w_OaecjNXpzm2Q.png alt></p><p>This time the row is eliminated by the left hand condition (OS = “Windows”) and VQL does not need to evaluate the Log column at all! Hence we get no logging message.</p><h3 id=using-laziness-in-practice>Using laziness in practice</h3><p>The previous discussion was rather theoretical but how would you use this behavior in reality? When we write VQL it is important to bear in mind how expensive we believe each operation would be.</p><p>For example consider the <strong>hash()</strong> function which calculates a hash of a file when evaluated. Suppose we were looking for a particular file with a known hash in the <strong>/usr/bin</strong> directory.</p><p><img src=../../img/1V-alj2p3P3hr5HPYYxM1wg.png alt></p><p>This query is rather expensive — we have to hash every single file in the directory and compare that to our malicious hash (In VQL <strong>=~</strong> is the regex match operator). If the directory is large, or we search through many directories, this can take many minutes!</p><p>Instead we can leverage the lazy evaluation property to make the query far more efficient by considering other attributes of the file which are quicker to calculate</p><p><img src=../../img/13_nBDC6EonDZuLmZZXvzgg.png alt></p><p>This revised query is almost instant! We only really hash those files whose size is exactly 499 bytes and never hash any of the other files which are not the ones we are looking for!</p><p>We can now encode this VQL query in an artifact, and launch it as a hunt on our entire deployment. This low cost, almost instant hunt is well suited for very wide deployment without fear of adverse effects on endpoint performance.</p><h2 id=conclusion>Conclusion</h2><p>VQL is a very powerful way of searching for specific indicators on the end point. A good working knowledge of VQL pays dividends to the DFIR hunter. This first part in our series of articles about VQL internals hopes to provide you with the tools and confidence to forge your own VQL queries. In the next article we explore VQL’s control structures such as <strong>if()</strong>, <strong>foreach()</strong> and <strong>switch()</strong>.</p><p>If you want to know more about Velociraptor, VQL and how to use it effectively to hunt across the enterprise, consider enrolling for the next available training course at <a href=https://www.velocidex.com/training/>https://www.velocidex.com/training/</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><p><img src=../../img/1VIwIVaEUGr16yQlEUy-K9A.png alt></p><p>When you finish writing your VQL query, click the “Save” button to update the notebook cell and recalculate the table.</p><p>You have just written your first VQL query!</p><p>One important thing to note is that the output of a query is always a table. The GUI will render the table in the VQL cell. The table will always return a sequence of rows, each row being a simple collection of columns. You can think of a row as simply a python dictionary with keys being the column names and values being arbitrary objects.</p><h3 id=vql-basics>VQL Basics</h3><p>VQL was designed to be easy to use and simple to understand. It is also based on SQL but does not support more complex SQL constructs like joins. The basic statement in VQL looks like this:</p><p><img src=../../img/1lkLMfTJJDPVUtw1fsBPUEQ.png alt></p><p>VQL queries start with the SELECT keyword, and are then followed by a list of “Column Selectors” which specify the columns that will be emitted. A VQL query can also have a WHERE clause — representing a filter which the row must pass before it is emitted.</p><p>One of the biggest differences between VQL and SQL is the use of parameters given to plugins. SQL was designed to operate on static data tables, however, in VQL, data sources are not static — they are actually plugins which generate rows when called (for example <em>pslist()</em> is a plugin which returns one process per row).</p><p>Since plugins run code, it makes sense that they would accept arguments just like functions. Therefore in VQL plugins receive keyword arguments. VQL does not support positional arguments — all arguments are named. In the GUI pressing “?” inside a plugin will suggest all the keywords the plugin accepts so it is really easy to find the names for a plugin’s arguments.</p><p><img src=../../img/1LhnuM1rFwDIhJelj4wN2AA.png alt></p><p>VQL Plugins generate rows, but what exactly is a row? Unlike SQL which deals with simple data types, a VQL row can be thought of as a mapping (i.e. python dictionary or a JSON object) where keys are the column names, and values can take on simple types like integers, strings, as well as complex types like other objects, timestamps etc.</p><p>You can see the raw data for each row in the table by clicking the “Show Raw JSON” button (Looks like binoculars) in the table GUI. For example, for the above query we can see the raw data as below.</p><p><img src=../../img/1qCKk06PkMDt79-X9Vu8K8Q.png alt></p><p>In our case the <strong>info()</strong> plugin generated a single row with information about the running platform. The raw data consists of a list of JSON objects — each object represents a single row. Rows have column names and each column may contain different data.</p><h3 id=lazy-vql>Lazy VQL</h3><p>One interesting aspect of VQL is lazy evaluation. Since VQL functions can be expensive or have side effects it is important to understand how they are evaluated. In the following discussion we will illustrate this by use of the <strong>log()</strong> VQL function — this function simply emits a logging message (you can think of it as the VQL equivalent of <strong>print</strong>).</p><p>Let us modify the above query to simply log a simple message “I ran!”</p><p><img src=../../img/1-k1KllnlrUkKBgiLO3FvvQ.png alt></p><p>The GUI renders query logs in red under the table. As we can see the log() function evaluated to <strong>true</strong> and a side effect was logging a message.</p><p>It is best to understand how lazy evaluation works by looking at examples. Consider the following example:</p><p><img src=../../img/10XsMrQaOdDrFlzUH-LPjqw.png alt></p><p>In this query we add another column to the output of the info() plugin called “Log” which contains the **log() **function. We then use this column in the WHERE clause. Since the log() function always returns true, the row will pass the filter and be emitted, as well as a log message printed.</p><p>What happens however, if the row is filtered out? Let us change this query to be filtered only if the OS is windows (this query is running on Linux).</p><p><img src=../../img/1-k3j8cbSXKjB-RLQcBgYew.png alt></p><p>Since no rows are emitted, the log() function is never evaluated! Therefore we got no logging message. Notice how the log() function is evaluated lazily — since the output is not needed since the row is filtered out.</p><p>Let’s now change the query to consider the Log column in the WHERE clause</p><p><img src=../../img/1d0mjp1CUCjGbwuj8NB25Lw.png alt></p><p>Because the WHERE clause needs to evaluate the column “Log” the log() function will be evaluated first — even though the row is ultimately eliminated, we still receive a log message!</p><p>VQL evaluates a logical expression in a lazy manner — the left hand side of the AND clause is evaluated, and if true the right hand side is evaluated.</p><p>Let’s swap the order of the AND clause</p><p><img src=../../img/12NQXdVa7w_OaecjNXpzm2Q.png alt></p><p>This time the row is eliminated by the left hand condition (OS = “Windows”) and VQL does not need to evaluate the Log column at all! Hence we get no logging message.</p><h3 id=using-laziness-in-practice>Using laziness in practice</h3><p>The previous discussion was rather theoretical but how would you use this behavior in reality? When we write VQL it is important to bear in mind how expensive we believe each operation would be.</p><p>For example consider the <strong>hash()</strong> function which calculates a hash of a file when evaluated. Suppose we were looking for a particular file with a known hash in the <strong>/usr/bin</strong> directory.</p><p><img src=../../img/1V-alj2p3P3hr5HPYYxM1wg.png alt></p><p>This query is rather expensive — we have to hash every single file in the directory and compare that to our malicious hash (In VQL <strong>=~</strong> is the regex match operator). If the directory is large, or we search through many directories, this can take many minutes!</p><p>Instead we can leverage the lazy evaluation property to make the query far more efficient by considering other attributes of the file which are quicker to calculate</p><p><img src=../../img/13_nBDC6EonDZuLmZZXvzgg.png alt></p><p>This revised query is almost instant! We only really hash those files whose size is exactly 499 bytes and never hash any of the other files which are not the ones we are looking for!</p><p>We can now encode this VQL query in an artifact, and launch it as a hunt on our entire deployment. This low cost, almost instant hunt is well suited for very wide deployment without fear of adverse effects on endpoint performance.</p><h2 id=conclusion>Conclusion</h2><p>VQL is a very powerful way of searching for specific indicators on the end point. A good working knowledge of VQL pays dividends to the DFIR hunter. This first part in our series of articles about VQL internals hopes to provide you with the tools and confidence to forge your own VQL queries. In the next article we explore VQL’s control structures such as <strong>if()</strong>, <strong>foreach()</strong> and <strong>switch()</strong>.</p><p>If you want to know more about Velociraptor, VQL and how to use it effectively to hunt across the enterprise, consider enrolling for the next available training course at <a href=https://www.velocidex.com/training/>https://www.velocidex.com/training/</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2020/2020-06-19-the-velociraptor-query-language-pt-2-fe92bb7aa150/index.html b/blog/2020/2020-06-19-the-velociraptor-query-language-pt-2-fe92bb7aa150/index.html
index 86d0ce79723..eadc9db9e91 100644
--- a/blog/2020/2020-06-19-the-velociraptor-query-language-pt-2-fe92bb7aa150/index.html
+++ b/blog/2020/2020-06-19-the-velociraptor-query-language-pt-2-fe92bb7aa150/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Scopes, Looping and joining with foreach…"><link rel=icon href=/images/favicon.png type=image/png><title>The Velociraptor Query Language Pt 2 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-06-19-the-velociraptor-query-language-pt-2-fe92bb7aa150/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-06-19-the-velociraptor-query-language-pt-2-fe92bb7aa150/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>The Velociraptor Query Language Pt 2</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><ul><li><a href=#the-scope>The scope</a></li><li><a href=#the-foreach-plugin-and-looping>The foreach plugin and looping</a></li><li><a href=#more-foreach-examples>More foreach examples</a></li><li><a href=#conclusions>Conclusions</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags><div class=tags><a class=tag-link href=/tags/vql>VQL</a>
 <a class=tag-link href=/tags/low-level>Low level</a></div></div><div id=body-inner><h1>The Velociraptor Query Language Pt 2</h1><p><img src=../../img/0rLy01O0JHT3Kp57q.jpg alt></p><p>In our previous article I introduced the basics of the Velociraptor Query Language (VQL). We have learned the basic structure of VQL is similar to the SQL SELECT statement</p><p><img src=../../img/06-m6txTbGOzeIqrJ.png alt></p><p>However, one of the main differences between SQL and VQL is that VQL’s data sources are not simple data tables, but are instead executable code termed “plugins”. VQL plugins are simply generators of rows, and may take a number of named arguments.</p><h3 id=the-scope>The scope</h3><p>Just like most other programming languages, VQL has a concept of a scope. You can think of the scope as a bag of names referring to values. When VQL encounters a symbol reference within in the query, the VQL engine will consult the scope at that point and try to resolve the symbol’s name for an actual object.</p><p>For example consider the following simple query</p><pre><code class=language-vql>SELECT * FROM info()
-</code></pre><p>When VQL encounters the symbol “<strong>info</strong>” it looks at the scope object used to evaluate the query, for a plugin with that name. If there is such a plugin, VQL will call it and extract rows from it.</p><p>Scopes can also be nested — a scope is not one simple dictionary, instead it is a stack of dictionaries. Looking up a name in the scope walks the scope stack in reverse order (from inner scope to outer scope) looking for a match.</p><p><img src=../../img/1IXt3ZEGZDVlbk1nUGQYQVw.png alt></p><p>Consider the above query SELECT OS FROM info(). The query begins with a parent scope and then VQL will run the info() plugin. The plugin will emits a row containing information about the platform. VQL will then create a nested subscope appending the row to the parent scope, and propagate the row further in the query.</p><p>The column selector in this query refers to the symbol <strong>OS</strong>. In order to resolve this symbol, VQL will walk the nested scope in reverse and will find a column called OS in the row. This will resolve the name and end the search, causing the OS to be emitted into the result set.</p><p>Lets crank it up a bit — what if we refer to an unknown symbol?</p><p><img src=../../img/14NKhmecY8Wu2GTxDcfVn1g.png alt></p><p>In the above query SELECT OS, Foo FROM info() we refer to an unknown symbol called <strong>Foo</strong>. VQL will attempt to resolve this symbol by walking the scope stack as before, but since the symbol is not known this will fail.</p><p>VQL emits a warning that Symbol Foo is not found and helpfully prints the current scope at the point of resolution. As you can see from the warning message, the scope consists of a list of layers, each layer has a set of columns. This is why we refer to the scope as a scope stack.</p><p>The last element in the scope stack is the row produced by the info() plugin. (As can be seen by the usual columns emitted by info() including an OS column).</p><p>Note that VQL emits a warning but the query keeps going — most errors in VQL are “soft” errors that do not terminate the query from running. VQL does its best to continue with query execution as much as possible.</p><h3 id=the-foreach-plugin-and-looping>The foreach plugin and looping</h3><p>The previous section covered the query scope in what seems like a rather theoretical and very computer science manner — why should you care about it? The concept of scope is central to VQL and it is critical to understanding how data moves throughout the query.</p><p>Consider the example of the foreach() plugin. Unlike SQL, VQL does not support joins. Instead, VQL provides a plugin to enable data from two different data sources to be combined.</p><p>In VQL plugins accept named arguments, but the arguments do not have to be simple types like integers or strings. It is also possible to provide a subquery as an argument to a plugin. The foreach() plugin takes advantage of this property by accepting a <strong>row</strong> query and a <strong>query</strong> query. For each row emitted by the <strong>row</strong> query, the foreach() plugin executes the query provided in the <strong>query</strong> argument. This is illustrated in the diagram below.</p><p><img src=../../img/1EMA7RdO2bH0ZBoS3EPTP9A.png alt></p><p>How can we use this in practice? Consider the following example…</p><p><img src=../../img/1XgdBwQdDL4VHhJAWJGsFEw.png alt></p><p>In this example, we select all columns from the foreach() plugin, providing the <strong>row</strong> argument a query which lists all the running processes and extract their binary path. For each binary path, we run the stat() plugin returning filesystem information (like timestamps, size etc).</p><p>While this query is obviously useful from a DFIR perspective (it tells us when the binary of each process was modified), it also shows how scope is used within VQL.</p><p>You might notice that we refer to a symbol Exe within the <strong>query</strong> query — where does this get resolved from? The foreach plugin creates a sub-scope in which to run the <strong>query</strong> query, and appends the row to it. In this way, it is possible to access symbols from the iterated row from the inner loop, and therefore stat a new file each time. Information flows from the <strong>row</strong> query into the <strong>query</strong> query by way of the nested scope that is shared between them.</p><h3 id=more-foreach-examples>More foreach examples</h3><p>The foreach plugin is one of the most often used plugins in VQL. It is very common to apply one plugin over the result set of another plugin. Here we give several examples:</p><h4 id=yara-scan-files-matching-a-glob-expression>Yara scan files matching a glob expression:</h4><p><img src=../../img/1bGb_CYsiRQko7ai0mcWaVw.png alt></p><h4 id=list-all-open-file-handles-from-all-chrome-processes>List all open file handles from all chrome processes:</h4><p><img src=../../img/1h8EgsM6ji2Vv1ewQLx5ikQ.png alt></p><h3 id=conclusions>Conclusions</h3><p>This second installment in our series of articles about VQL internals I introduced the idea of scope in VQL. We saw how scope lookups are central to controlling data flow within the query, with some plugins creating nested sub scope in which to evaluate subqueries.</p><p>We saw how this principle is applied in the <strong>foreach()</strong> plugin to implement a looping control flow — apply a query over each row produced by another query. This construct allows us to iterate over rows and act on each one with a second dedicated query. Although functionally equivalent to an SQL join operation, it is arguably easier to read and understand VQL queries.</p><p>In the next part we see how VQL queries themselves may be stored in the scope and reused. We go back to the concept of lazy evaluation we encountered in the first part and see how this applies to sub queries. We then introduce event queries as a way to run fully asynchronous and event driven VQL.</p><p>If you want to know more about Velociraptor, VQL and how to use it effectively to hunt across the enterprise, consider enrolling for the next available training course at <a href=https://www.velocidex.com/training/>https://www.velocidex.com/training/</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><p>When VQL encounters the symbol “<strong>info</strong>” it looks at the scope object used to evaluate the query, for a plugin with that name. If there is such a plugin, VQL will call it and extract rows from it.</p><p>Scopes can also be nested — a scope is not one simple dictionary, instead it is a stack of dictionaries. Looking up a name in the scope walks the scope stack in reverse order (from inner scope to outer scope) looking for a match.</p><p><img src=../../img/1IXt3ZEGZDVlbk1nUGQYQVw.png alt></p><p>Consider the above query SELECT OS FROM info(). The query begins with a parent scope and then VQL will run the info() plugin. The plugin will emits a row containing information about the platform. VQL will then create a nested subscope appending the row to the parent scope, and propagate the row further in the query.</p><p>The column selector in this query refers to the symbol <strong>OS</strong>. In order to resolve this symbol, VQL will walk the nested scope in reverse and will find a column called OS in the row. This will resolve the name and end the search, causing the OS to be emitted into the result set.</p><p>Lets crank it up a bit — what if we refer to an unknown symbol?</p><p><img src=../../img/14NKhmecY8Wu2GTxDcfVn1g.png alt></p><p>In the above query SELECT OS, Foo FROM info() we refer to an unknown symbol called <strong>Foo</strong>. VQL will attempt to resolve this symbol by walking the scope stack as before, but since the symbol is not known this will fail.</p><p>VQL emits a warning that Symbol Foo is not found and helpfully prints the current scope at the point of resolution. As you can see from the warning message, the scope consists of a list of layers, each layer has a set of columns. This is why we refer to the scope as a scope stack.</p><p>The last element in the scope stack is the row produced by the info() plugin. (As can be seen by the usual columns emitted by info() including an OS column).</p><p>Note that VQL emits a warning but the query keeps going — most errors in VQL are “soft” errors that do not terminate the query from running. VQL does its best to continue with query execution as much as possible.</p><h3 id=the-foreach-plugin-and-looping>The foreach plugin and looping</h3><p>The previous section covered the query scope in what seems like a rather theoretical and very computer science manner — why should you care about it? The concept of scope is central to VQL and it is critical to understanding how data moves throughout the query.</p><p>Consider the example of the foreach() plugin. Unlike SQL, VQL does not support joins. Instead, VQL provides a plugin to enable data from two different data sources to be combined.</p><p>In VQL plugins accept named arguments, but the arguments do not have to be simple types like integers or strings. It is also possible to provide a subquery as an argument to a plugin. The foreach() plugin takes advantage of this property by accepting a <strong>row</strong> query and a <strong>query</strong> query. For each row emitted by the <strong>row</strong> query, the foreach() plugin executes the query provided in the <strong>query</strong> argument. This is illustrated in the diagram below.</p><p><img src=../../img/1EMA7RdO2bH0ZBoS3EPTP9A.png alt></p><p>How can we use this in practice? Consider the following example…</p><p><img src=../../img/1XgdBwQdDL4VHhJAWJGsFEw.png alt></p><p>In this example, we select all columns from the foreach() plugin, providing the <strong>row</strong> argument a query which lists all the running processes and extract their binary path. For each binary path, we run the stat() plugin returning filesystem information (like timestamps, size etc).</p><p>While this query is obviously useful from a DFIR perspective (it tells us when the binary of each process was modified), it also shows how scope is used within VQL.</p><p>You might notice that we refer to a symbol Exe within the <strong>query</strong> query — where does this get resolved from? The foreach plugin creates a sub-scope in which to run the <strong>query</strong> query, and appends the row to it. In this way, it is possible to access symbols from the iterated row from the inner loop, and therefore stat a new file each time. Information flows from the <strong>row</strong> query into the <strong>query</strong> query by way of the nested scope that is shared between them.</p><h3 id=more-foreach-examples>More foreach examples</h3><p>The foreach plugin is one of the most often used plugins in VQL. It is very common to apply one plugin over the result set of another plugin. Here we give several examples:</p><h4 id=yara-scan-files-matching-a-glob-expression>Yara scan files matching a glob expression:</h4><p><img src=../../img/1bGb_CYsiRQko7ai0mcWaVw.png alt></p><h4 id=list-all-open-file-handles-from-all-chrome-processes>List all open file handles from all chrome processes:</h4><p><img src=../../img/1h8EgsM6ji2Vv1ewQLx5ikQ.png alt></p><h3 id=conclusions>Conclusions</h3><p>This second installment in our series of articles about VQL internals I introduced the idea of scope in VQL. We saw how scope lookups are central to controlling data flow within the query, with some plugins creating nested sub scope in which to evaluate subqueries.</p><p>We saw how this principle is applied in the <strong>foreach()</strong> plugin to implement a looping control flow — apply a query over each row produced by another query. This construct allows us to iterate over rows and act on each one with a second dedicated query. Although functionally equivalent to an SQL join operation, it is arguably easier to read and understand VQL queries.</p><p>In the next part we see how VQL queries themselves may be stored in the scope and reused. We go back to the concept of lazy evaluation we encountered in the first part and see how this applies to sub queries. We then introduce event queries as a way to run fully asynchronous and event driven VQL.</p><p>If you want to know more about Velociraptor, VQL and how to use it effectively to hunt across the enterprise, consider enrolling for the next available training course at <a href=https://www.velocidex.com/training/>https://www.velocidex.com/training/</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2020/2020-07-13-velociraptor-in-the-tool-age-d896dfe71b9/index.html b/blog/2020/2020-07-13-velociraptor-in-the-tool-age-d896dfe71b9/index.html
index 19d5aa2d286..d61d2a14eac 100644
--- a/blog/2020/2020-07-13-velociraptor-in-the-tool-age-d896dfe71b9/index.html
+++ b/blog/2020/2020-07-13-velociraptor-in-the-tool-age-d896dfe71b9/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Velociraptor’s integration with third party tools"><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor in the tool age :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-07-13-velociraptor-in-the-tool-age-d896dfe71b9/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-07-13-velociraptor-in-the-tool-age-d896dfe71b9/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -77,4 +77,4 @@
 if we wanted to launch a completely separate binary on the endpoint,
 or a larger powershell module? How can Velociraptor facilitate the
 distribution, coordination and collection of tool output from
-thousands of endpoints efficiently and quickly?</p><p>Since<a href=https://github.com/Velocidex/velociraptor/releases> release 0.4.6</a>, Velociraptor supports including external tools directly in the artifact definition. This makes it easier than ever before to use external tools in your artifacts transparently — Velociraptor will ensure the tool is downloaded to the endpoint if needed and is available for use in your VQL.</p><h3 id=example-hollows-hunter>Example: Hollows hunter</h3><p>To illustrate the process, we will use the <a href=https://github.com/hasherezade/hollows_hunter>hollows hunter tool</a> as an example. This tool is written by the amazing <a href=https://hasherezade.github.io/>HASHEREZADE</a> who develops a bunch of useful tools to inspect binaries in memory (most famous is the <a href=https://github.com/hasherezade/pe-sieve>pe_sieve</a> tool).</p><p>We would like to develop a Velociraptor artifact that collects all processes potentially injected by using the hollows hunter on the endpoint. Before we start though, we need to actually have such a sample to test on.</p><p>Thanks to the Atomic Red Team we can use a simple test to inject a dll into notepad++. I will use the test for <a href=https://github.com/redcanaryco/atomic-red-team/blob/master/atomics/T1055/T1055.md#atomic-test-1---process-injection-via-mavinjectexe>T1055</a> to inject the dll into <em>notepad++.exe</em> on my test VM (which has the Process ID 4108):</p><p><img src=../../img/1E6SBS406C2B-3BVVJ10Sig.png alt></p><p>Now we can check that hollows hunter detects this:</p><p><img src=../../img/1wt1KqixkeSs8Ael96fpAXA.png alt></p><h3 id=writing-the-artifact>Writing the artifact</h3><p>We now create the artifact in the Velociraptor GUI. Start off by selecting the <em>“View Artifacts”</em> pane in the left sidebar and click the* “New Artifact”* button to bring up the artifact editor UI. The editor will have a pre-filled in template which helps to guide the user to produce the correct syntax so I will just edit that.</p><p><img src=../../img/1s9fGjhLnwf2uW4vRt3qCQA.png alt></p><p>The first thing I will do is name the artifact <em>“Custom.Windows.Detection.ProcessHollowing”</em>. Since this is a custom artifact, it must start with the word **Custom. **to keep it distinct from Velociraptor’s built in artifacts. I can also add a quick description to help users understand what this artifact does.</p><p>Next I will declare that this artifact needs the <strong>hollows_hunter</strong> tool. Velociraptor will ensure this tool is available on the endpoint when the artifact is collected. The tool’s name is simply a string that I will use to refer to the tool below. It will be automatically added to Velociraptor’s inventory of external tools.</p><p>By providing the url, Velociraptor can fetch the tool by itself from this URL. If the tool is not yet known to Velociraptor, the server will fetch the file and calculate the hash the first time and store it. In the next section we can see how to manage tools in Velociraptor.</p><p>Now we are ready to write the VQL that will use the tool. The VQL will run on the endpoint during collection and will need a valid path to the hollows hunter executable. Velociraptor will manage uploading the executable to the endpoint and caching the binary locally, ensuring its hash does not change over time. To make this process as easy to use as possible, as far as the artifact writer is concerned, they simply need to call the <em>“Generic.Utils.FetchBinary()”</em> artifact to get a path to the local binary.</p><p><img src=../../img/1WWMvYGQvreCfPbKrtDYuew.png alt></p><p>The first VQL query simply calls the <strong>Generic.Utils.FetchBinary()</strong> artifact with the required tool name (Note that we don&rsquo;t need to specify a url since this is already known to the system). We assign the result of this query to the <em>“binaries”</em> variable — which will contain an array of rows as is always the case with assigning a query to a variable (in this case only one row).</p><p>At the same time we also obtain a temporary directory to store results in. This directory will be automatically removed when the query ends to clean up.</p><p>Next we call the binary using the <strong>execve()</strong> plugin with the appropriate arguments — We wish to dump the memory of affected processed and write json results into the temp directory (The length parameter forces the execve() plugin to wait until the buffer is full before emitting the row — this will wait until the program is done and emit a single row with Stdout as a column.)</p><p>After the hollows hunter program ends, we glob over all the files in the temp directory and just upload them to the server (we chain the two queries together using the <em>chain()</em> plugin).</p><p>The complete artifact can be seen below:</p><script src=https://gist.github.com/scudette/0f5d5102b6e3b1580b4feccdf7d59b53.js></script><h3 id=collecting-from-the-endpoint>Collecting from the endpoint</h3><p>Now let&rsquo;s test this artifact by collecting it from our test VM. Simply search for the hostname in the search box, and view the* “Collected Artifacts”* pane to see previously collected artifacts. Click the <em>“Collect new artifacts”</em> button and search for our newly created hollows hunter artifact.</p><p><img src=../../img/1iTGEgzlLFnoQpwwLBTylQg.png alt></p><p>Click* “Launch Collection” *to collect it from the endpoint. We can view the query log as it is executing on the endpoint to really appreciate what is happening behind the scenes.</p><p><img src=../../img/1uf7vfDoXWEUYO6KOabXHtw.png alt></p><p>The endpoint initially does not have a copy of the hollows hunter binary cached locally, so it needs to download it. The endpoint will now sleep a random time before actually downloading it in order to stagger downloads from potentially thousands of endpoints in a hunt.</p><p>After a short sleep, the endpoint will download the binary directly from GitHub, it will then calculate the hash of the binary it downloaded with the expected hash that was sent by the server. If the hashes match, then the endpoint will keep this file in the temp directory. The hash comparison protects endpoints from the GitHub binary changing unexpectedly.</p><p>Finally, the endpoint simply runs the tool, and uploads the results to the server.</p><p><img src=../../img/15U_9frnLTdA1vsyPuewh4g.png alt></p><p>The user can access those results as normally by simply getting the results in a zip file from the <strong>Artifact Collection</strong> tab.</p><p><img src=../../img/1G9m-FkIBjgzQh1xURAnpzw.png alt></p><p>We can now also hunt for this on our entire fleet to retrieve all the injected binaries in minutes!</p><p>Note that once the binary is cached on the endpoint, the Velociraptor client will not need to download it again, as long as the cached hash matches the expected hash.</p><h3 id=tool-support--deep-dive>Tool support — deep dive</h3><p>In the above example, from the point of view of the artifact writer, the hollows hunter binary just magically appeared on the endpoint when it was required by an artifact that used it. How does this actually work?</p><p>Velociraptor has integrated support for external tools since 0.4.6. The tools are managed by the velociraptor tools command. You can see what tools Velociraptor knows about using the <strong>velociraptor tools show</strong> command:</p><p><img src=../../img/1y0ApRgFzYELr7A2Ko4AHNQ.png alt></p><p>We can see that Velociraptor knows the hash of the hollows hunter tool and it also keeps a copy of the binary in the filestore under a special obfuscated name.</p><h3 id=using-a-custom-tool>Using a custom tool</h3><p>Previously we have seen that the endpoints all downloaded the hollows hunter binary directly from GitHub. In practice, if you have thousands of clients all trying to download the same binary in a hunt it might trigger GitHub’s DDoS protections. At larger scale it might be better to serve binaries from more reliable source, like cloud buckets or Velociraptor’s server itself.</p><p>Suppose we also wanted to use a special version of hollows_hunter (perhaps an unreleased version with extra features or detections) so we would really like to host the binary ourselves.</p><p>We can directly upload our custom version to Velociraptor using the <strong>velociraptor tools upload</strong> command</p><p><img src=../../img/1cQ-vwx6uj3JSavrF5m5ejQ.png alt></p><p>Velociraptor will now serve the binary from the frontends directly when used (seen by the serve_locally flag). Note that the binary will still only be downloaded if the local copy on the endpoint does not have the required hash so if this is a frequently used tool it will generally not generate a lot of download traffic.</p><h3 id=conclusions>Conclusions</h3><p>The aim of the new tool integration is to have Velociraptor automatically manage local caching on the endpoint of external files. It is possible to have the endpoints download the files from any URL, or serve it locally from Velociraptor itself. Either way, Velociraptor ensures the file integrity by specifying in the collection request the required file hash.</p><p>Although in this example we used a binary on the endpoint, this is not necessary. The scheme works just as well with any file type. For example, sysmon configuration files can also be kept in a central place and artifacts can sync them on the endpoint and load them as required.</p><p>The ability to resync tools on the endpoint opens the door to versioned files. For example, we frequently use Yara rule files containing frequently changing signatures from threat feeds and other intel. By updating the hashes on the Velociraptor server we can force endpoints to use the latest version of the signatures whenever an artifact is run, but only if they don&rsquo;t already have the latest pack of yara rules (which may be large).</p><p>Caching the files locally means the overheads of downloading the file each time is eliminated, the artifact YAML itself contains all one needs to collect this specific type of evidence. In the above example, we can collect the hollows hunter multiple times, but the binary will only be actually downloaded once per endpoint. The next collection will simply use the same local binary while its hash is not changed.</p><p>To play with this new feature yourself, take Velociraptor for a spin! It is a available on <a href=https://github.com/Velocidex/velociraptor>GitHub</a> under and open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=../../img/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+thousands of endpoints efficiently and quickly?</p><p>Since<a href=https://github.com/Velocidex/velociraptor/releases> release 0.4.6</a>, Velociraptor supports including external tools directly in the artifact definition. This makes it easier than ever before to use external tools in your artifacts transparently — Velociraptor will ensure the tool is downloaded to the endpoint if needed and is available for use in your VQL.</p><h3 id=example-hollows-hunter>Example: Hollows hunter</h3><p>To illustrate the process, we will use the <a href=https://github.com/hasherezade/hollows_hunter>hollows hunter tool</a> as an example. This tool is written by the amazing <a href=https://hasherezade.github.io/>HASHEREZADE</a> who develops a bunch of useful tools to inspect binaries in memory (most famous is the <a href=https://github.com/hasherezade/pe-sieve>pe_sieve</a> tool).</p><p>We would like to develop a Velociraptor artifact that collects all processes potentially injected by using the hollows hunter on the endpoint. Before we start though, we need to actually have such a sample to test on.</p><p>Thanks to the Atomic Red Team we can use a simple test to inject a dll into notepad++. I will use the test for <a href=https://github.com/redcanaryco/atomic-red-team/blob/master/atomics/T1055/T1055.md#atomic-test-1---process-injection-via-mavinjectexe>T1055</a> to inject the dll into <em>notepad++.exe</em> on my test VM (which has the Process ID 4108):</p><p><img src=../../img/1E6SBS406C2B-3BVVJ10Sig.png alt></p><p>Now we can check that hollows hunter detects this:</p><p><img src=../../img/1wt1KqixkeSs8Ael96fpAXA.png alt></p><h3 id=writing-the-artifact>Writing the artifact</h3><p>We now create the artifact in the Velociraptor GUI. Start off by selecting the <em>“View Artifacts”</em> pane in the left sidebar and click the* “New Artifact”* button to bring up the artifact editor UI. The editor will have a pre-filled in template which helps to guide the user to produce the correct syntax so I will just edit that.</p><p><img src=../../img/1s9fGjhLnwf2uW4vRt3qCQA.png alt></p><p>The first thing I will do is name the artifact <em>“Custom.Windows.Detection.ProcessHollowing”</em>. Since this is a custom artifact, it must start with the word **Custom. **to keep it distinct from Velociraptor’s built in artifacts. I can also add a quick description to help users understand what this artifact does.</p><p>Next I will declare that this artifact needs the <strong>hollows_hunter</strong> tool. Velociraptor will ensure this tool is available on the endpoint when the artifact is collected. The tool’s name is simply a string that I will use to refer to the tool below. It will be automatically added to Velociraptor’s inventory of external tools.</p><p>By providing the url, Velociraptor can fetch the tool by itself from this URL. If the tool is not yet known to Velociraptor, the server will fetch the file and calculate the hash the first time and store it. In the next section we can see how to manage tools in Velociraptor.</p><p>Now we are ready to write the VQL that will use the tool. The VQL will run on the endpoint during collection and will need a valid path to the hollows hunter executable. Velociraptor will manage uploading the executable to the endpoint and caching the binary locally, ensuring its hash does not change over time. To make this process as easy to use as possible, as far as the artifact writer is concerned, they simply need to call the <em>“Generic.Utils.FetchBinary()”</em> artifact to get a path to the local binary.</p><p><img src=../../img/1WWMvYGQvreCfPbKrtDYuew.png alt></p><p>The first VQL query simply calls the <strong>Generic.Utils.FetchBinary()</strong> artifact with the required tool name (Note that we don&rsquo;t need to specify a url since this is already known to the system). We assign the result of this query to the <em>“binaries”</em> variable — which will contain an array of rows as is always the case with assigning a query to a variable (in this case only one row).</p><p>At the same time we also obtain a temporary directory to store results in. This directory will be automatically removed when the query ends to clean up.</p><p>Next we call the binary using the <strong>execve()</strong> plugin with the appropriate arguments — We wish to dump the memory of affected processed and write json results into the temp directory (The length parameter forces the execve() plugin to wait until the buffer is full before emitting the row — this will wait until the program is done and emit a single row with Stdout as a column.)</p><p>After the hollows hunter program ends, we glob over all the files in the temp directory and just upload them to the server (we chain the two queries together using the <em>chain()</em> plugin).</p><p>The complete artifact can be seen below:</p><script src=https://gist.github.com/scudette/0f5d5102b6e3b1580b4feccdf7d59b53.js></script><h3 id=collecting-from-the-endpoint>Collecting from the endpoint</h3><p>Now let&rsquo;s test this artifact by collecting it from our test VM. Simply search for the hostname in the search box, and view the* “Collected Artifacts”* pane to see previously collected artifacts. Click the <em>“Collect new artifacts”</em> button and search for our newly created hollows hunter artifact.</p><p><img src=../../img/1iTGEgzlLFnoQpwwLBTylQg.png alt></p><p>Click* “Launch Collection” *to collect it from the endpoint. We can view the query log as it is executing on the endpoint to really appreciate what is happening behind the scenes.</p><p><img src=../../img/1uf7vfDoXWEUYO6KOabXHtw.png alt></p><p>The endpoint initially does not have a copy of the hollows hunter binary cached locally, so it needs to download it. The endpoint will now sleep a random time before actually downloading it in order to stagger downloads from potentially thousands of endpoints in a hunt.</p><p>After a short sleep, the endpoint will download the binary directly from GitHub, it will then calculate the hash of the binary it downloaded with the expected hash that was sent by the server. If the hashes match, then the endpoint will keep this file in the temp directory. The hash comparison protects endpoints from the GitHub binary changing unexpectedly.</p><p>Finally, the endpoint simply runs the tool, and uploads the results to the server.</p><p><img src=../../img/15U_9frnLTdA1vsyPuewh4g.png alt></p><p>The user can access those results as normally by simply getting the results in a zip file from the <strong>Artifact Collection</strong> tab.</p><p><img src=../../img/1G9m-FkIBjgzQh1xURAnpzw.png alt></p><p>We can now also hunt for this on our entire fleet to retrieve all the injected binaries in minutes!</p><p>Note that once the binary is cached on the endpoint, the Velociraptor client will not need to download it again, as long as the cached hash matches the expected hash.</p><h3 id=tool-support--deep-dive>Tool support — deep dive</h3><p>In the above example, from the point of view of the artifact writer, the hollows hunter binary just magically appeared on the endpoint when it was required by an artifact that used it. How does this actually work?</p><p>Velociraptor has integrated support for external tools since 0.4.6. The tools are managed by the velociraptor tools command. You can see what tools Velociraptor knows about using the <strong>velociraptor tools show</strong> command:</p><p><img src=../../img/1y0ApRgFzYELr7A2Ko4AHNQ.png alt></p><p>We can see that Velociraptor knows the hash of the hollows hunter tool and it also keeps a copy of the binary in the filestore under a special obfuscated name.</p><h3 id=using-a-custom-tool>Using a custom tool</h3><p>Previously we have seen that the endpoints all downloaded the hollows hunter binary directly from GitHub. In practice, if you have thousands of clients all trying to download the same binary in a hunt it might trigger GitHub’s DDoS protections. At larger scale it might be better to serve binaries from more reliable source, like cloud buckets or Velociraptor’s server itself.</p><p>Suppose we also wanted to use a special version of hollows_hunter (perhaps an unreleased version with extra features or detections) so we would really like to host the binary ourselves.</p><p>We can directly upload our custom version to Velociraptor using the <strong>velociraptor tools upload</strong> command</p><p><img src=../../img/1cQ-vwx6uj3JSavrF5m5ejQ.png alt></p><p>Velociraptor will now serve the binary from the frontends directly when used (seen by the serve_locally flag). Note that the binary will still only be downloaded if the local copy on the endpoint does not have the required hash so if this is a frequently used tool it will generally not generate a lot of download traffic.</p><h3 id=conclusions>Conclusions</h3><p>The aim of the new tool integration is to have Velociraptor automatically manage local caching on the endpoint of external files. It is possible to have the endpoints download the files from any URL, or serve it locally from Velociraptor itself. Either way, Velociraptor ensures the file integrity by specifying in the collection request the required file hash.</p><p>Although in this example we used a binary on the endpoint, this is not necessary. The scheme works just as well with any file type. For example, sysmon configuration files can also be kept in a central place and artifacts can sync them on the endpoint and load them as required.</p><p>The ability to resync tools on the endpoint opens the door to versioned files. For example, we frequently use Yara rule files containing frequently changing signatures from threat feeds and other intel. By updating the hashes on the Velociraptor server we can force endpoints to use the latest version of the signatures whenever an artifact is run, but only if they don&rsquo;t already have the latest pack of yara rules (which may be large).</p><p>Caching the files locally means the overheads of downloading the file each time is eliminated, the artifact YAML itself contains all one needs to collect this specific type of evidence. In the above example, we can collect the hollows hunter multiple times, but the binary will only be actually downloaded once per endpoint. The next collection will simply use the same local binary while its hash is not changed.</p><p>To play with this new feature yourself, take Velociraptor for a spin! It is a available on <a href=https://github.com/Velocidex/velociraptor>GitHub</a> under and open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=../../img/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2020/2020-07-14-triage-with-velociraptor-pt-4-cf0e60810d1e/index.html b/blog/2020/2020-07-14-triage-with-velociraptor-pt-4-cf0e60810d1e/index.html
index 5080c0d9041..306938a7e7a 100644
--- a/blog/2020/2020-07-14-triage-with-velociraptor-pt-4-cf0e60810d1e/index.html
+++ b/blog/2020/2020-07-14-triage-with-velociraptor-pt-4-cf0e60810d1e/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Building a stand-alone collector with the GUI"><link rel=icon href=/images/favicon.png type=image/png><title>Triage with Velociraptor — Pt 4 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-07-14-triage-with-velociraptor-pt-4-cf0e60810d1e/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-07-14-triage-with-velociraptor-pt-4-cf0e60810d1e/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -74,4 +74,4 @@
 </code></pre><p><img src=../../img/15wHG_tix0ZpeXIJuYScWKg.png alt></p><p>We will be running the server on <strong>Windows</strong>, Using the <strong>FileBaseDataStore</strong> with a <strong>Self Signed SSL</strong> configuration. I will also add a user called “<strong>mic</strong>” to the server (basically I pressed enter on each question to accept the default).</p><p>Now I can start the frontend using:</p><pre><code class=language-sh># velociraptor.exe -c server.config.yaml frontend -v
 </code></pre><p><img src=../../img/1MneJxbjF5TmYUxzmCaOrWw.png alt></p><p>The GUI will be listening on <a href=https://127.0.0.1:8889/>https://127.0.0.1:8889/</a> by default. So let&rsquo;s visit it with our browser</p><p><img src=../../img/1vcBHvISTTRm_B0NlBanD2Q.png alt></p><h3 id=building-the-offline-collector>Building the offline collector</h3><p>An offline collector is simply a binary which is pre-configured to collect certain artifacts — when the user runs it without arguments, the binary will start collecting the artifacts and then terminate.</p><p>The script that actually builds the binary is a server side VQL artifact (it is actually running VQL on the server) hence we need to launch it from the “Server Artifacts” screen on the left sidebar.</p><p><img src=../../img/1yA8N8OgcVKP-kvjJwnljwQ.png alt></p><p>Click the <strong>Build Collector</strong> button to bring up an artifact search dialog. This dialog is very similar to the one you use to collect artifacts from the endpoint in a client/server model — and for a good reason! An offline collector is simply a way to collect the artifacts that we could have collected using a client/server without having a full Velociraptor deployment. We are using sneakernet rather than internet to transfer the files, but the data we collect are exactly the same!</p><p>For this example, we will collect the KapeFiles targets as in previous articles. Simply click add to add this artifact to the collection set. You can add multiple different artifacts at the same time. Note that you are not restricted to just collect files! You can collect processes, memory or any other artifact you can think of — Velociraptor will just collect each one into the one output zip file.</p><h3 id=configuring-the-artifacts>Configuring the artifacts</h3><p>Velociraptor artifacts take parameters to control and customize the VQL they run. Depending on the chosen artifacts, different parameters will be available for configuration. Simply scroll down to select which Kape target file to collect As a reminder a KapeFile target (.<strong>tkape</strong>) file is a simple YAML file specifying a file glob pattern selecting certain files to collect.</p><p><img src=../../img/1sfdds6gdFa5irpLQuCsh1A.png alt></p><p>We will simply select the <strong>BasicCollection</strong> which includes things like the registry hives, the USN Journal etc. When we are happy with the collection, click Next.</p><p><img src=../../img/1UP2MAPGNch_5ezdrWKUL9g.png alt></p><p>Velociraptor will repack the Velociraptor binary with the required artifacts, so here we need to select the target operating system. Let’s leave the <strong>Collection Type</strong> as <em>Zip Archive</em> for now — this simply creates a large Zip file containing all the collected data. Clicking Next now begins the build process. The first time we run this after install, Velociraptor will contact Github to download all the binaries it might require so it might take a few minutes to get started.</p><p><img src=../../img/1URkBb2Wl0uQZszjygM7Baw.png alt></p><p>This process simply ends up calling the <strong>Server.Utils.CreateCollector</strong> artifact. The Artifact runs VQL query which creates the packed binary (on the server) and uploads it to the server again. We can simply click* “Prepare Download”* to obtain a zip file with the executable in it.</p><h3 id=running-the-collector>Running the collector</h3><p>I will now download the zip file from the server and extract the collector into the download directory for testing.</p><p><img src=../../img/1djPVk9gI3TP-c-zQhd93uA.png alt></p><p><img src=../../img/1NOxJpFX8xRlepBT2YZD8qA.png alt></p><p>Simply running the binary will begin to collect all the artifacts we specified — in this case the KapeFile Basic Collection target. Finally an output Zip file and a HTML report will be produced using the hostname and timestamp.</p><p><img src=../../img/18Dv9vI8lZ8FYm1MxbUAR1w.png alt></p><h3 id=including-external-tools>Including external tools</h3><p>Since release 0.4.6, Velociraptor has built in support for external tools. This means that artifacts that declare tools that they need will receive those binaries on the endpoint when they are being collected. We previously described<a href="https://medium.com/velociraptor-ir/velociraptor-in-the-tool-age-d896dfe71b9?source=friends_link&amp;sk=20178bda3d9accc46d343b1c825c75a6"> this process</a> using the client/server model.</p><p>When building an Offline collector, Velociraptor will also embed the external tools directly into the binary without needing to do anything different with the artifact. Note that the offline collector <strong>does not download</strong> the tool from an external URL — the tool is already packaged in the collector binary itself.</p><div class="mynotices tip"><div heading=tip><p>The artifact will run the same way when used in client/server mode or
 in offline collector mode. This makes it easier to use the same
-reusable VQL in different contexts.</p></div></div><p>Let’s try to collect the same artifact we did previously — the <strong>hollows hunter</strong> artifact. Just to recap the artifact is shown below</p><script src=https://gist.github.com/scudette/0f5d5102b6e3b1580b4feccdf7d59b53.js></script><p>I will just add it to the Offline Collector builder</p><p><img src=../../img/11zNKC3hp53YU6rqlcW3bfQ.png alt></p><p>Build the collector as before… extract it to the downloads directory again and launch the collector binary.</p><p><img src=../../img/17xUMzXapzXS_7HFXgQQzww.png alt></p><p>We can see that the <strong>hollows_hunter64.exe</strong> binary is copied into a temp file, executed and its results uploaded into the zip file. All temp files are cleaned up after collection.</p><h3 id=collecting-to-the-cloud>Collecting to the cloud.</h3><p>Previously we collected files into a local Zip file. Sometimes it is more convenient to upload the collection to a cloud bucket so the user does not need to worry about transferring a large collection to us.</p><p>To do this, simply select a different Collection Type — I will choose AWS bucket or you can also upload to Google Cloud Storage. You will need to obtain an upload key for the S3 bucket. This is described in the <a href=https://docs.aws.amazon.com/general/latest/gr/aws-sec-cred-types.html#access-keys-and-secret-access-keys>AWS documentation</a>. You should also restrict key access to the bucket to upload only since the keys are embedded inside the collector binary (See the AWS <a href=https://docs.aws.amazon.com/AmazonS3/latest/dev/example-policies-s3.html>examples on user policies</a>).</p><p><img src=../../img/1hcyeu84ENyeT0z3f4i7ocA.png alt></p><p>Running this, the collector will automatically upload the zip file and the report to the cloud bucket.</p><p><img src=../../img/1wx7sv-gvtvSUXBHYwDLzUA.png alt></p><h3 id=conclusions>Conclusions</h3><p>Velociraptor is simply a VQL evaluation engine. Although it works best in client/server mode sometimes we have to use an offline collector. The Offline collector is independent and pre-programmed to collect the most appropriate artifacts for triage and then upload the data to a safe location. You can launch the offline artifact across the network via group policy, WMI or WinRM as a kind of poor-man’s remote forensics platform.</p><p>Remember that the offline collector is not limited to simply collecting files! It has the full power of Velociraptor at its disposal so it can collect any volatile machine state that can be collected by Velociraptor — including process memory scanning and dumping, file yara scans, MFT analysis and more.</p><p>To play with this new feature yourself, take Velociraptor for a spin! It is a available on <a href=https://github.com/Velocidex/velociraptor>GitHub</a> under an open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+reusable VQL in different contexts.</p></div></div><p>Let’s try to collect the same artifact we did previously — the <strong>hollows hunter</strong> artifact. Just to recap the artifact is shown below</p><script src=https://gist.github.com/scudette/0f5d5102b6e3b1580b4feccdf7d59b53.js></script><p>I will just add it to the Offline Collector builder</p><p><img src=../../img/11zNKC3hp53YU6rqlcW3bfQ.png alt></p><p>Build the collector as before… extract it to the downloads directory again and launch the collector binary.</p><p><img src=../../img/17xUMzXapzXS_7HFXgQQzww.png alt></p><p>We can see that the <strong>hollows_hunter64.exe</strong> binary is copied into a temp file, executed and its results uploaded into the zip file. All temp files are cleaned up after collection.</p><h3 id=collecting-to-the-cloud>Collecting to the cloud.</h3><p>Previously we collected files into a local Zip file. Sometimes it is more convenient to upload the collection to a cloud bucket so the user does not need to worry about transferring a large collection to us.</p><p>To do this, simply select a different Collection Type — I will choose AWS bucket or you can also upload to Google Cloud Storage. You will need to obtain an upload key for the S3 bucket. This is described in the <a href=https://docs.aws.amazon.com/general/latest/gr/aws-sec-cred-types.html#access-keys-and-secret-access-keys>AWS documentation</a>. You should also restrict key access to the bucket to upload only since the keys are embedded inside the collector binary (See the AWS <a href=https://docs.aws.amazon.com/AmazonS3/latest/dev/example-policies-s3.html>examples on user policies</a>).</p><p><img src=../../img/1hcyeu84ENyeT0z3f4i7ocA.png alt></p><p>Running this, the collector will automatically upload the zip file and the report to the cloud bucket.</p><p><img src=../../img/1wx7sv-gvtvSUXBHYwDLzUA.png alt></p><h3 id=conclusions>Conclusions</h3><p>Velociraptor is simply a VQL evaluation engine. Although it works best in client/server mode sometimes we have to use an offline collector. The Offline collector is independent and pre-programmed to collect the most appropriate artifacts for triage and then upload the data to a safe location. You can launch the offline artifact across the network via group policy, WMI or WinRM as a kind of poor-man’s remote forensics platform.</p><p>Remember that the offline collector is not limited to simply collecting files! It has the full power of Velociraptor at its disposal so it can collect any volatile machine state that can be collected by Velociraptor — including process memory scanning and dumping, file yara scans, MFT analysis and more.</p><p>To play with this new feature yourself, take Velociraptor for a spin! It is a available on <a href=https://github.com/Velocidex/velociraptor>GitHub</a> under an open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2020/2020-08-16-profiling-the-beast-58913437fd16/index.html b/blog/2020/2020-08-16-profiling-the-beast-58913437fd16/index.html
index 83a6451492c..a4590428f2f 100644
--- a/blog/2020/2020-08-16-profiling-the-beast-58913437fd16/index.html
+++ b/blog/2020/2020-08-16-profiling-the-beast-58913437fd16/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Velociraptors exposing their inner workings…"><link rel=icon href=/images/favicon.png type=image/png><title>Profiling the beast :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-08-16-profiling-the-beast-58913437fd16/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-08-16-profiling-the-beast-58913437fd16/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -77,4 +77,4 @@
 operating system. In fact 35% of our time is spent waiting for Windows
 Defender’s real time scanner (which blocks <code>os.Open</code> for us as it
 scans the files on demand — Windows defender is a huge performance
-killer.).</p><div class="mynotices note"><div heading=note><p>Our job as Velociraptor developers is to spend as little time as possible in our own code relative to the time spent in the operating system or external libraries.</p></div></div><p>The function’s source code is shown in the top right pane and we see how much time is spent at each line of code. This makes it easy to see what function calls end up taking the most time and guides our thinking into possible optimizations</p><p>A performance bug arises when our function does more work than is necessary and therefore spends too long doing it. This slows down processing. Clearly in this case the biggest contributors are hashing and filesystem operations which exist outside our code base — so this VQL query is pretty good already.</p><p>NOTE: The astute reader may spot 5.8% lost to the garbage collector through calls to <em>makeslice()</em> in line 67. These calls were eliminated by a recent commit.</p><h3 id=conclusions>Conclusions</h3><p>Velociraptor is an open source project — exposing its inner working to all users. While we do not require users to be able to understand the profiling information themselves, they are able to easily collect this data on running production deployments.</p><p>By exposing debugging and profiling tools in an easy way to end users, developers enable users to attach more useful traces to bug reports, and allow developers to assist in a more efficient way than simply reporting qualitative information such as high memory use or non-performant code.</p><p>The profiling traces are typically much smaller than full memory core dumps and usually do not contain sensitive information. Profiles only contain high level statistics about memory and CPU usage (For example the CPU profile we saw in this article are obtained by statistic analysis of<a href=https://golang.org/pkg/net/http/pprof/> sampled backtrace</a>s).</p><p>We find this extremely valuable in the Velociraptor project, but the same approach can be replicated by any Golang project:</p><div class="mynotices note"><div heading=note><p>By exposing profiling and debugging information to our users, in running production binaries we are able to easily get high value visibility into hard to reproduce error conditions and therefore be more effective in isolating and fixing bugs.</p></div></div><p>If you are interested in looking inside Velociraptor’s inner workings, check out the<a href=https://github.com/Velocidex/velociraptor> Github</a> page and join us on Discord and our mailing list.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+killer.).</p><div class="mynotices note"><div heading=note><p>Our job as Velociraptor developers is to spend as little time as possible in our own code relative to the time spent in the operating system or external libraries.</p></div></div><p>The function’s source code is shown in the top right pane and we see how much time is spent at each line of code. This makes it easy to see what function calls end up taking the most time and guides our thinking into possible optimizations</p><p>A performance bug arises when our function does more work than is necessary and therefore spends too long doing it. This slows down processing. Clearly in this case the biggest contributors are hashing and filesystem operations which exist outside our code base — so this VQL query is pretty good already.</p><p>NOTE: The astute reader may spot 5.8% lost to the garbage collector through calls to <em>makeslice()</em> in line 67. These calls were eliminated by a recent commit.</p><h3 id=conclusions>Conclusions</h3><p>Velociraptor is an open source project — exposing its inner working to all users. While we do not require users to be able to understand the profiling information themselves, they are able to easily collect this data on running production deployments.</p><p>By exposing debugging and profiling tools in an easy way to end users, developers enable users to attach more useful traces to bug reports, and allow developers to assist in a more efficient way than simply reporting qualitative information such as high memory use or non-performant code.</p><p>The profiling traces are typically much smaller than full memory core dumps and usually do not contain sensitive information. Profiles only contain high level statistics about memory and CPU usage (For example the CPU profile we saw in this article are obtained by statistic analysis of<a href=https://golang.org/pkg/net/http/pprof/> sampled backtrace</a>s).</p><p>We find this extremely valuable in the Velociraptor project, but the same approach can be replicated by any Golang project:</p><div class="mynotices note"><div heading=note><p>By exposing profiling and debugging information to our users, in running production binaries we are able to easily get high value visibility into hard to reproduce error conditions and therefore be more effective in isolating and fixing bugs.</p></div></div><p>If you are interested in looking inside Velociraptor’s inner workings, check out the<a href=https://github.com/Velocidex/velociraptor> Github</a> page and join us on Discord and our mailing list.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2020/2020-08-17-velociraptor-sso-authentication-6dd68d46dccf/index.html b/blog/2020/2020-08-17-velociraptor-sso-authentication-6dd68d46dccf/index.html
index 9275f06b40a..49dd5240026 100644
--- a/blog/2020/2020-08-17-velociraptor-sso-authentication-6dd68d46dccf/index.html
+++ b/blog/2020/2020-08-17-velociraptor-sso-authentication-6dd68d46dccf/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Protect your Velociraptor with OAuth2"><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor SSO Authentication :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-08-17-velociraptor-sso-authentication-6dd68d46dccf/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-08-17-velociraptor-sso-authentication-6dd68d46dccf/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -72,4 +72,4 @@
 <span class=links>Velociraptor SSO Authentication</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><ul><li><a href=#modes-of-authentication>Modes of authentication</a></li><li><a href=#oauth2-flow>OAuth2 flow</a></li><li><a href=#google-oauth2>Google OAuth2</a></li><li><a href=#github-oauth2-flow>GitHub OAuth2 flow</a></li><li><a href=#microsoft-azure-oauth2-flow>Microsoft Azure OAuth2 flow</a></li></ul></li><li><a href=#conclusions>Conclusions</a></li></ul></nav></div></div></div></div><div id=head-tags><div class=tags><a class=tag-link href=/tags/integration>Integration</a>
 <a class=tag-link href=/tags/authentication>Authentication</a></div></div><div id=body-inner><h1>Velociraptor SSO Authentication</h1><p><img src=../../img/1LYHMWBm-PIb4rrMurPgAUA.png alt></p><p>The Velociraptor GUI allows administrators and DFIR team members to rapidly respond and hunt across their entire deployment in seconds. This is a powerful capability, and must be adequately protected.</p><h3 id=modes-of-authentication>Modes of authentication</h3><p>Velociraptor supports two modes of authentication:</p><ol><li><p>Basic authentication</p></li><li><p>Single Sign On using third party OAuth2 logon flow.</p></li></ol><p>In the basic authentication mode, GUI users are added by the administrator and given passwords. When a user logs into the GUI, their browser prompts them to enter a username and password, and the password hashes are checked against those hashes stored in the database.</p><p>This traditional authentication flow is simple to use and implement but has a number of shortfalls — the main one being that the user needs to remember yet another password for Velociraptor and so they are likely to reuse an existing password. Modern secure applications also use 2 factor authentication as an additional security mechanism with potentially complex authentication schemes (e.g. secure token).</p><h3 id=oauth2-flow>OAuth2 flow</h3><p>Velociraptor supports delegating the authentication to an identity provider (Currently Github, Microsoft or Google and potentially many others in future). This means that Velociraptor never gets to see a user’s password or actually logs them in at all — Velociraptor relies on the OAuth2 provider to assert that the user authenticated correctly (and potentially used the required 2FA method). There are many resources about OAuth2 for example t<a href=https://www.digitalocean.com/community/tutorials/an-introduction-to-oauth-2>his</a> or the <a href=https://tools.ietf.org/html/rfc6749>RFC6749</a> also has a lot of details.</p><p>While the OAuth2 protocol allows an application to request access to different resources owned by the user, Velociraptor only requests basic access to their email address — Velociraptor associates ACL policies with the user’s email address.</p><p>The following steps are performed to log a user into the Velociraptor GUI:</p><ol><li><p>The User’s browser makes a request to the Velociraptor GUI</p></li><li><p>Velociraptor redirects the browser to the OAuth2 provider (e.g. Google)</p></li><li><p>The user logs on to their provider and receives a consent screen asking them if they wish to authorize Velociraptor to receive their email address.</p></li><li><p>Once the user authorizes the app, the OAuth2 provider redirects back to the Velociraptor **callback URL **with a token. The callback URL is the path location within the Velociraptor App that will handle the incoming token.</p></li><li><p>At this point Velociraptor already knows the user’s email address and can log them in, as long as they have sufficient permissions (The Velociraptor <a href=https://www.velocidex.com/blog/medium/2020-03-29-velociraptors-acl-model-7f497575daee/>ACL model</a> still applied).</p></li></ol><p>The advantage of this scheme is that Velociraptor never handles user passwords, and additional authentication requirements like 2FA can be imposed by the OAuth2 provider.</p><h3 id=google-oauth2>Google OAuth2</h3><p>Velociraptor previously <a href=https://www.velocidex.com/blog/html/2018/12/23/deploying_velociraptor_with_oauth_sso.html>only supported Google </a>as an OAuth2 provider. However this recently changed when new providers were added.</p><p>This post outlines the process of setting up OAuth2 authentication for both GitHub and Microsoft O365 environments.</p><h3 id=github-oauth2-flow>GitHub OAuth2 flow</h3><p>Setting up a Github OAuth2 application is detailed in <a href=https://docs.github.com/en/developers/apps/creating-an-oauth-app>their extensive developer docs</a>, so I will not repeat it here. I will just include a screenshot of the final screen. For this example I will set up one of our training VMs:</p><p><img src=../../img/1V0SFCRyBB3EgaTnRGEvbvg.png alt></p><p>The most important item in this form is the Authorization callback URL, which must be of the form</p><pre><code>https://public DNS name/auth/github/callback
 </code></pre><p>Once I click Register Application, Github will provide me with a client id and a client secret — Those are used by Velociraptor to send authorization requests to Github for authentication.</p><p><img src=../../img/1ZU-eolQPeo8inmTfq4VkVA.png alt></p><p>Now that we have the client id and secret we can create our configuration file using the interactive config generator</p><pre><code class=language-sh>velociraptor.exe config generate -i
-</code></pre><p><img src=../../img/1yJ7sIPl_qnL9UUrJvNZJLA.png alt></p><p>Be sure to enter the proper external DNS name of your Velociraptor server, select <strong>Authenticate users with SSO</strong> and choose <strong>Github</strong> as the provider. Velociraptor will show once again, the correct redirect URL that needs to be entered into the GitHub form as we have seen above.</p><p>Finally enter the Github client ID and secret and create the server config files. To deploy on a typical Debian based VM, simply build the debian package ready to deploy to your server.</p><p><img src=../../img/19WneTKLF_985TEXYJKcAbQ.png alt></p><p>I will now push the Debian package to the server and install it using SCP and SSH. When I navigate to the public URL at <a href=https://vm1.training.velocidex.com>https://vm1.training.velocidex.com</a> I am redirected to Github to authenticate and upon authorizing the app I can log into my Velociraptor server.</p><p><img src=../../img/1U5rYGAoEkXr1TeQFJ8UDiw.png alt></p><p>The GitHub OAuth2 flow is excellent! I received an email immediately when my user was authorized and I can see the total number of users authorized to this application.</p><h3 id=microsoft-azure-oauth2-flow>Microsoft Azure OAuth2 flow</h3><p>Many Velociraptor users are using Office 365 and Azure to manage their organizations. I can set up the Microsoft OAuth2 flow in a very similar way to the previous flow. The only main difference with O365 is the concept of tenants — Azure provides each organization with a tenancy which is normally their domain name.</p><p>First I will navigate to the Azure Active Directory application and select <strong>App Registrations</strong>. Click on <strong>New registration</strong> to add a new App.</p><p><img src=../../img/1enBaYt9G2zve-8l6zIbmjw.png alt></p><p>Now I provide the app with a name. Here I can select if this app should be used by users from different tenants or restricted to my org only.</p><p><img src=../../img/1EakNAGcDH2r4BEuEQJ0fXA.png alt></p><p>Finally enter the callback URL as before. Note that this is a different URL because it is using the Azure authenticator within Velociraptor. When submitting this, Azure AD will only create a client ID for our application. We need to manually create the client secret using an additional step in the UI. I will select <strong>Certificate & Secrets</strong> from the menu.</p><p><img src=../../img/1eWcpTayDUJsCnzmlYk_9pg.png alt></p><p>Then create a new secret by giving it a name and an expiry.</p><p><img src=../../img/1gzLxCqvsdJj4hHADofYDLw.png alt></p><p>Now we have both the client id and secret from the previous screen. We simply need to copy those to the configuration wizard. This time we need to provide the tenant ID as well.</p><p><img src=../../img/1ivNMZZSw74VsMRCbY43FHw.png alt></p><p><img src=../../img/1fCDpwr3e0HiWscr_6O5cPQ.png alt></p><p>After installing this server and accessing it with a web browser, the authentication will redirect to Microsoft to authenticate the user.</p><p><img src=../../img/1R6OYfqhNwABhfkQJQjNlMA.png alt></p><h2 id=conclusions>Conclusions</h2><p>We have seen how to secure the GUI with the new OAuth2 providers. Having a choice of providers allows different organizations to deploy Velociraptor safely at scale and integrate Velociraptor directly into their enterprise architecture.</p><p>Note that OAuth2 is only responsible for authentication — i.e. the user is who they claim to be. It does not automatically grant them any permission within the GUI. If a user does not have a specific ACL record they will be rejected:</p><p><img src=../../img/18xUczf1PP7eyM9XaBzTBEw.png alt></p><p>You can assign or delete users using the <strong>velociraptor user add</strong> command. You can also assign roles to users using the <strong>velociraptor acl grant</strong> commands. The configuration wizard offers to provision an initial set of administrator users for smoother install, but you can always add users later using the command line.</p><p>If your favorite authentication provider is not yet supported, please file a feature request on our <a href=https://github.com/Velocidex/velociraptor>GitHub</a> project, or even send us a pull request!</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><p><img src=../../img/1yJ7sIPl_qnL9UUrJvNZJLA.png alt></p><p>Be sure to enter the proper external DNS name of your Velociraptor server, select <strong>Authenticate users with SSO</strong> and choose <strong>Github</strong> as the provider. Velociraptor will show once again, the correct redirect URL that needs to be entered into the GitHub form as we have seen above.</p><p>Finally enter the Github client ID and secret and create the server config files. To deploy on a typical Debian based VM, simply build the debian package ready to deploy to your server.</p><p><img src=../../img/19WneTKLF_985TEXYJKcAbQ.png alt></p><p>I will now push the Debian package to the server and install it using SCP and SSH. When I navigate to the public URL at <a href=https://vm1.training.velocidex.com>https://vm1.training.velocidex.com</a> I am redirected to Github to authenticate and upon authorizing the app I can log into my Velociraptor server.</p><p><img src=../../img/1U5rYGAoEkXr1TeQFJ8UDiw.png alt></p><p>The GitHub OAuth2 flow is excellent! I received an email immediately when my user was authorized and I can see the total number of users authorized to this application.</p><h3 id=microsoft-azure-oauth2-flow>Microsoft Azure OAuth2 flow</h3><p>Many Velociraptor users are using Office 365 and Azure to manage their organizations. I can set up the Microsoft OAuth2 flow in a very similar way to the previous flow. The only main difference with O365 is the concept of tenants — Azure provides each organization with a tenancy which is normally their domain name.</p><p>First I will navigate to the Azure Active Directory application and select <strong>App Registrations</strong>. Click on <strong>New registration</strong> to add a new App.</p><p><img src=../../img/1enBaYt9G2zve-8l6zIbmjw.png alt></p><p>Now I provide the app with a name. Here I can select if this app should be used by users from different tenants or restricted to my org only.</p><p><img src=../../img/1EakNAGcDH2r4BEuEQJ0fXA.png alt></p><p>Finally enter the callback URL as before. Note that this is a different URL because it is using the Azure authenticator within Velociraptor. When submitting this, Azure AD will only create a client ID for our application. We need to manually create the client secret using an additional step in the UI. I will select <strong>Certificate & Secrets</strong> from the menu.</p><p><img src=../../img/1eWcpTayDUJsCnzmlYk_9pg.png alt></p><p>Then create a new secret by giving it a name and an expiry.</p><p><img src=../../img/1gzLxCqvsdJj4hHADofYDLw.png alt></p><p>Now we have both the client id and secret from the previous screen. We simply need to copy those to the configuration wizard. This time we need to provide the tenant ID as well.</p><p><img src=../../img/1ivNMZZSw74VsMRCbY43FHw.png alt></p><p><img src=../../img/1fCDpwr3e0HiWscr_6O5cPQ.png alt></p><p>After installing this server and accessing it with a web browser, the authentication will redirect to Microsoft to authenticate the user.</p><p><img src=../../img/1R6OYfqhNwABhfkQJQjNlMA.png alt></p><h2 id=conclusions>Conclusions</h2><p>We have seen how to secure the GUI with the new OAuth2 providers. Having a choice of providers allows different organizations to deploy Velociraptor safely at scale and integrate Velociraptor directly into their enterprise architecture.</p><p>Note that OAuth2 is only responsible for authentication — i.e. the user is who they claim to be. It does not automatically grant them any permission within the GUI. If a user does not have a specific ACL record they will be rejected:</p><p><img src=../../img/18xUczf1PP7eyM9XaBzTBEw.png alt></p><p>You can assign or delete users using the <strong>velociraptor user add</strong> command. You can also assign roles to users using the <strong>velociraptor acl grant</strong> commands. The configuration wizard offers to provision an initial set of administrator users for smoother install, but you can always add users later using the command line.</p><p>If your favorite authentication provider is not yet supported, please file a feature request on our <a href=https://github.com/Velocidex/velociraptor>GitHub</a> project, or even send us a pull request!</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2020/2020-09-28-velociraptor-network-communications-30568624043a/index.html b/blog/2020/2020-09-28-velociraptor-network-communications-30568624043a/index.html
index 4fe1f1fd106..36af9647b5d 100644
--- a/blog/2020/2020-09-28-velociraptor-network-communications-30568624043a/index.html
+++ b/blog/2020/2020-09-28-velociraptor-network-communications-30568624043a/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Listen to the beast"><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor Communications :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-09-28-velociraptor-network-communications-30568624043a/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-09-28-velociraptor-network-communications-30568624043a/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Velociraptor Communications</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><ul><li><a href=#velociraptors-config-file>Velociraptor’s config file</a></li><li><a href=#communication-overview>Communication overview</a></li><li><a href=#velociraptors-internal-pki>Velociraptor’s internal PKI</a></li><li><a href=#messages>Messages</a></li><li><a href=#key-caching>Key caching</a></li></ul></li><li><a href=#http-protocol>HTTP protocol</a><ul><li><a href=#tls-verification>TLS verification</a></li><li><a href=#debugging-client-communications>Debugging client communications</a></li></ul></li><li><a href=#ssl-offloading>SSL Offloading</a></li><li><a href=#conclusions>Conclusions</a></li></ul></nav></div></div></div></div><div id=head-tags><div class=tags><a class=tag-link href=/tags/internals>Internals</a></div></div><div id=body-inner><h1>Velociraptor Communications</h1><p><img src="../../img/0qkAnwMlxrKGQR6ke?width=600px" alt></p><p>You might have heard that Velociraptor allows you to quickly query endpoint state for rapid response and monitoring of many thousands of devices across the internet. Unlike some other tools, Velociraptor’s communication is scalable, secure and instantaneous.</p><p>Many people ask me about the client/server communication protocol. The <a href=https://www.velocidex.com/docs/getting-started/stand_alone/>Velociraptor documentation</a> simply states that communications is encrypted over a TLS connection but there is more to it than that.</p><p>In this post I would like to delve into the low level details of how clients securely communicate with the server and cover some common deployment scenarios. By understanding exactly how this works we will gain insight into debugging communication problems and enabling more sophisticated deployment scenarios.</p><h3 id=velociraptors-config-file>Velociraptor’s config file</h3><p>In the following discussion we will refer to a typical Velociraptor configuration file as generated by the command</p><pre><code class=language-sh>velociraptor config generate -i
 </code></pre><p>For this example we select a typical self signed deployment.</p><script src=https://gist.github.com/scudette/b0e80d3d039a74bfa2e41130f0c4955d.js></script><h3 id=communication-overview>Communication overview</h3><p>Clients (Velociraptor instances running on endpoints) connect to the server over the http protocol, typically embedded within a TLS connection. Although Velociraptor shares the same communication protocol as was used in the GRR project, it was enhanced for Velociraptor’s use to be more secure and efficient.</p><h3 id=velociraptors-internal-pki>Velociraptor’s internal PKI</h3><p>Every Velociraptor deployments creates an internal PKI which underpins it. The configuration wizard create an internal CA with an X509 certificate and a private key. This CA is used to</p><ol><li><p>Create initial server certificates and any additional certificates for key rotation.</p></li><li><p>CA public certificate is embedded in the client’s configuration and is used to verify server communications.</p></li><li><p>The CA is used to create API keys for programmatic access. The server is then able to verify API clients.</p></li></ol><p>The configuration file contains the CA’s X509 certificate in the <strong>Client.ca_certificate</strong> parameter (it is therefore embedded in the client configuration). The private key is contained in the <strong>CA.private_key</strong> parameter.</p><div class="mynotices tip"><div heading=tip><p>In a secure installation you should remove the <strong>CA.private_key</strong> section from the server config and keep it offline. You only need it to create new API keys using the <em>velociraptor config api_client</em> command, and the server does not need it in normal operations.</p></div></div><h3 id=messages>Messages</h3><p>Clients and servers communicate by sending each other messages (which are simply protocol buffers), for example, a message may contain VQL queries or result sets. Messages are collected into a list and sent in a single POST operation in a <strong>MessageList</strong> protobuf. This protobuf is encrypted using a session key with a symmetric cipher (<code>aes_128_cbc</code>). The session key is chosen by the sending party and is written into an encrypted <strong>Cipher</strong> protobuf and sent along with each message.</p><p><img src=../../img/1ntQkR2sRm8mIg5vkYjngEg.png alt></p><p>This symmetric key is encoded in a <strong>Cipher Properties</strong> protobuf which is encrypted in turn using the receiving party’s public key and signed using the sending party’s private key.</p><h3 id=key-caching>Key caching</h3><p>The encrypted cipher is sent with each message and contains an encrypted version of the same session key. This means that it is always possible to derive the session key from each post message by performing RSA decrypt/verify operations, but having decoded the symmetric key once — it is possible to cache it for the remainder of the session. This avoids expensive RSA operations — as long as the server communicated with the client recently, the symmetric key will be cached and can be reused.</p><p>On a loaded server you might notice CPU utilization spikes for a few seconds after the system starts up, as the server unlocks the session keys from incoming clients, but after that the server should not need to perform many RSA operations and CPU load should be low since most session keys are cached in memory.</p><p>The <strong>Frontend.expected_clients</strong> setting controls the size of the memory cache of session keys. If this is too small, keys will be evicted from cache and CPU load will rapidly rise as the server is forced to do more RSA operations to decrypt client messages. You should increase this value to reflect how many clients you expect to be active at the same time.</p><h2 id=http-protocol>HTTP protocol</h2><p>In the last section we saw that Velociraptor messages are both signed and encrypted by the internal deployment CA. But how are these messages exchanged over the internet?</p><p>Velociraptor uses HTTPS POST messages to deliver message sets to the server. The server in turn sends messages to the client in the body of the POST request. The client connects to one of the server URLs provided in the <strong>Client.server_urls</strong> setting in its config file.</p><p>Before the client communicates with the server, the client must verify it is actually talking with the correct server. This happens at two levels:</p><ul><li><p>If the URL is a HTTPS URL then the TLS connection needs to be verified</p></li><li><p>The client will fetch the url /server.pem to receive the server’s internal certificate. This certificate must be verified by the embedded CA.</p></li></ul><p>Note that this verification is essential in order to prevent the client from accidentally talking with captive portals or MITM proxies.</p><h3 id=tls-verification>TLS verification</h3><p>Velociraptor currently supports 2 modes for deployment via the config wizard:</p><ul><li><p>Self signed mode uses internal CAs for the TLS certificates. The client knows it is in self signed mode if the <strong>Client.use_self_signed_ssl</strong> flag is true.</p></li><li><p>Proper certificates minted by Let’s encrypt.</p></li></ul><p>Velociraptor verifies self signed TLS certificates using its built in CA. This essentially pins the server’s certificate inside the client — even if a MITM was able to mint another certificate (even if it was trusted by the global roots!) it would not be valid since it was not issued by Velociraptor’s internal CA which is the only CA we trust in this mode! In this way self signed mode is more secure than use a public CA.</p><p>The <strong>Client.pinned_server_name</strong> specifies the common name of the server (or DNS name in the Server Alternate Name (SAN) field). The client verifies that the certificate is correct <strong>AND</strong> that the name is the same as the pinned name. You typically do not need to change this setting.</p><p>If the client is not in self signed mode (i.e. <strong>Client.use_self_signed_ssl</strong> is false or not present), it expects to verify TLS connections using the system’s root certificate store. In this configuration, Velociraptor is susceptible to a MITM SSL inspection proxy, and we must rely on the internal encryption mechanism as described in the previous section to protect communications.</p><p><strong>NOTE</strong>: In practice we find that often customer networks do contain SSL inspection proxies and using self signed certificates breaks communications altogether. We typically prefer to deploy Let’s Encrypt certificates for reliability and better interoperability.</p><h3 id=debugging-client-communications>Debugging client communications</h3><p>Now that we have an understanding on the low level communication mechanism, let’s try to apply our understanding to debugging common deployment issues.</p><p>If the client does not appear to properly connect to the server, the first thing is to run it manually (using the <em>velociraptor client -v</em> command):</p><p><img src=../../img/1TOeyrCcX69mtUdO8E4ZK9g.png alt></p><p>In the above example, I ran the client manually with the -v switch. I see the client starting up and immediately trying to connect to its URL (in this case <a href=https://test.velocidex-training.com/>https://test.velocidex-training.com/</a> ) However this fails and the client will wait for a short time before retrying to connect again.</p><p><img src=../../img/1IzCgKdN28sjntuxd9mUJew.png alt></p><p>A common problem here is network filtering making it impossible to reach the server. You can test this by simply running curl with the server’s URL.</p><p>Once you enable connectivity, you might encounter another problem</p><p><img src=../../img/1p3MPNfTbXBzNMs-X4yv4SA.png alt></p><p>The <strong>Unable to parse PEM</strong> message indicates that the client is trying to fetch the <strong>server.pem</strong> file but it is not able to validate it. This often happens with captive portal type of proxies which interfere with the data transferred. It can also happen if your DNS setting point to a completely different server.</p><p>We can verify the <strong>server.pem</strong> manually by using curl (note that when using self signed mode you might need to provide curl with the -k flag to ignore the certificate errors):</p><p><img src=../../img/1P9W4CnX9qNLGiRgnHGyLAw.png alt></p><p>Note that the <strong>server.pem</strong> is always signed by the velociraptor internal CA in all deployment modes (even with lets encrypt). You can view the certificate details by using openssl:</p><pre><code class=language-sh>curl https://test.velocidex-training.com/server.pem | openssl x509 -text
-</code></pre><h2 id=ssl-offloading>SSL Offloading</h2><p>The Velociraptor server is very fast and can typically handle many thousands of clients connected at the same time. One of the largest limitations though is SSL processing. Typically SSL operations can take a significant amount of CPU resources in performing cryptography (we noted previously that Velociraptor’s own cryptography can be cached and therefore usually does not use much CPU).</p><p>Once approach to help scalability is to offload SSL processing to special reverse proxies. Typically these can use hardware cryptography acceleration to offload crypto from the CPU.</p><p><img src=../../img/1ppLjm2qy0pRt3RsDVKDDWA.png alt></p><p>In this example, we will show how nginx can be used to terminate the TLS connections and then forward plain HTTP connections to the Velociraptor server (Many cloud provides also offer a cloud version of an SSL load balancer). This setup is also suitable if you want to use standard certificates (i.e. not Let’s Encrypt ones).</p><p>First I will install nginx according to any number of tutorials on the net (for <a href=https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-18-04>this</a> or <a href=https://www.nginx.com/blog/using-free-ssltls-certificates-from-lets-encrypt-with-nginx/>this</a>). My config file is as follows:</p><script src=https://gist.github.com/scudette/03bf73f2430e4bb6e7923d69a232e77f.js></script><p>I am using certbot to manage the lets encrypt certificates and I have two main routes:</p><ol><li><p>URLs starting with <strong>/gui/</strong> will be redirected to the Velociraptor GUI port (by default port 8889) using plain HTTP.</p></li><li><p>All other URLs will be redirected to the frontend port (port 8000) using plain http.</p></li></ol><p>Now I need to make Velociraptor listen on plain http instead of the default TLS. I do this simply by adding the <strong>use_plain_http: true</strong> flag both to the GUI and Frontend sections.</p><p><img src=../../img/19YhBBqOhnLVanACm3Vdbog.png alt></p><p>I also specify the GUI to listen on the path starting with “/gui” instead of the root — this allows nginx to proxy the GUI at a different URL to the default.</p><p>On the client’s side, the server appears to be a proper SSL server. The client needs to connect to nginx which will present a valid certificate. Therefore the client needs to specify <strong>use_self_signed_ssl: false</strong> (or omit it) and also specify a https URL as the server’s location (i.e. <strong>Client.server_urls: [https://test.velocidex-training.com/]</strong>).</p><h2 id=conclusions>Conclusions</h2><p>We have seen that Velociraptor utilizes its own PKI to secure client/server communication. This PKI is used both to prevent interception of messages as well as preventing messages from being forged. The server verifies the client the message came from and the client verifies the server before it connects to it.</p><p>In addition, Velociraptor uses standard TLS communications to deliver messages using POST requests. TLS connections can either be self signed (but pinned) or use public CA PKI. Using a standard network protocol allows Velociraptor to easily fit into any modern corporate network (which might include SSL interception proxies etc).</p><p>By understanding how the communication takes place, we saw how we can debug network problems and even configure a reverse proxy for TLS offloading — an important feature to be able to scale even higher.</p><p>If you are interested in learning more about Velociraptor, check out our courses on <a href=https://www.velocidex.com/training/>https://www.velocidex.com/training/</a> or join us on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><h2 id=ssl-offloading>SSL Offloading</h2><p>The Velociraptor server is very fast and can typically handle many thousands of clients connected at the same time. One of the largest limitations though is SSL processing. Typically SSL operations can take a significant amount of CPU resources in performing cryptography (we noted previously that Velociraptor’s own cryptography can be cached and therefore usually does not use much CPU).</p><p>Once approach to help scalability is to offload SSL processing to special reverse proxies. Typically these can use hardware cryptography acceleration to offload crypto from the CPU.</p><p><img src=../../img/1ppLjm2qy0pRt3RsDVKDDWA.png alt></p><p>In this example, we will show how nginx can be used to terminate the TLS connections and then forward plain HTTP connections to the Velociraptor server (Many cloud provides also offer a cloud version of an SSL load balancer). This setup is also suitable if you want to use standard certificates (i.e. not Let’s Encrypt ones).</p><p>First I will install nginx according to any number of tutorials on the net (for <a href=https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-18-04>this</a> or <a href=https://www.nginx.com/blog/using-free-ssltls-certificates-from-lets-encrypt-with-nginx/>this</a>). My config file is as follows:</p><script src=https://gist.github.com/scudette/03bf73f2430e4bb6e7923d69a232e77f.js></script><p>I am using certbot to manage the lets encrypt certificates and I have two main routes:</p><ol><li><p>URLs starting with <strong>/gui/</strong> will be redirected to the Velociraptor GUI port (by default port 8889) using plain HTTP.</p></li><li><p>All other URLs will be redirected to the frontend port (port 8000) using plain http.</p></li></ol><p>Now I need to make Velociraptor listen on plain http instead of the default TLS. I do this simply by adding the <strong>use_plain_http: true</strong> flag both to the GUI and Frontend sections.</p><p><img src=../../img/19YhBBqOhnLVanACm3Vdbog.png alt></p><p>I also specify the GUI to listen on the path starting with “/gui” instead of the root — this allows nginx to proxy the GUI at a different URL to the default.</p><p>On the client’s side, the server appears to be a proper SSL server. The client needs to connect to nginx which will present a valid certificate. Therefore the client needs to specify <strong>use_self_signed_ssl: false</strong> (or omit it) and also specify a https URL as the server’s location (i.e. <strong>Client.server_urls: [https://test.velocidex-training.com/]</strong>).</p><h2 id=conclusions>Conclusions</h2><p>We have seen that Velociraptor utilizes its own PKI to secure client/server communication. This PKI is used both to prevent interception of messages as well as preventing messages from being forged. The server verifies the client the message came from and the client verifies the server before it connects to it.</p><p>In addition, Velociraptor uses standard TLS communications to deliver messages using POST requests. TLS connections can either be self signed (but pinned) or use public CA PKI. Using a standard network protocol allows Velociraptor to easily fit into any modern corporate network (which might include SSL interception proxies etc).</p><p>By understanding how the communication takes place, we saw how we can debug network problems and even configure a reverse proxy for TLS offloading — an important feature to be able to scale even higher.</p><p>If you are interested in learning more about Velociraptor, check out our courses on <a href=https://www.velocidex.com/training/>https://www.velocidex.com/training/</a> or join us on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2020/2020-11-13-the-windows-usn-journal-f0c55c9010e/index.html b/blog/2020/2020-11-13-the-windows-usn-journal-f0c55c9010e/index.html
index e6ccbb7dab6..f7b0b53a42c 100644
--- a/blog/2020/2020-11-13-the-windows-usn-journal-f0c55c9010e/index.html
+++ b/blog/2020/2020-11-13-the-windows-usn-journal-f0c55c9010e/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Digging up Window’s juicy secrets…"><link rel=icon href=/images/favicon.png type=image/png><title>The Windows USN Journal :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-11-13-the-windows-usn-journal-f0c55c9010e/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-11-13-the-windows-usn-journal-f0c55c9010e/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -76,4 +76,4 @@
 Windows.Forensics.LocalHashes.Query artifact on my endpoint and
 configure it to search for the hash
 <code>f4065c7516d47e6cb5b5f58e1ddd1312</code>. This hash can be entered as a
-table in the GUI or simply as a comma delimited text field.</p><p><img src=../../img/17SU9muB1xlvOuwZ-AGxkPQ.png alt></p><p>The artifact returns almost instantly with the file that this hash belongs to</p><p><img src=../../img/1Wprj9Wic03bIg-86ClDBtg.png alt></p><p>The local hash database is simply a SQLite file maintained by the VQL query. As such I can easily collect this file with a hunt if I wanted to archive the hash database periodically from all my endpoints.</p><p>Collecting the <strong>Windows.Forensics.LocalHashes.Glob</strong> artifact will populate the local hash database by simply crawling a directory, hashing all files inside it and populated the database — this is useful to pre-populate the database with hashes of files created before Velociraptor was installed.</p><h3 id=conclusion>Conclusion</h3><p>Velociraptor brings unprecedented visibility to endpoint machine states using state of the art forensic capabilities. In this post we saw how parsing the USN Journal allows Velociraptor to gather information about past filesystem activity. We also saw how detection and monitoring queries can be used to respond to file modification or creation in near real time.</p><p>Finally we saw this capability put into practice by maintaining a local hash database which can be queried on demand to quickly answer questions like <em>which machine in my fleet contain this hash?</em></p><p>To play with this new feature yourself, take Velociraptor for a spin! It is a available on <a href=https://github.com/Velocidex/velociraptor>GitHub</a> under an open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+table in the GUI or simply as a comma delimited text field.</p><p><img src=../../img/17SU9muB1xlvOuwZ-AGxkPQ.png alt></p><p>The artifact returns almost instantly with the file that this hash belongs to</p><p><img src=../../img/1Wprj9Wic03bIg-86ClDBtg.png alt></p><p>The local hash database is simply a SQLite file maintained by the VQL query. As such I can easily collect this file with a hunt if I wanted to archive the hash database periodically from all my endpoints.</p><p>Collecting the <strong>Windows.Forensics.LocalHashes.Glob</strong> artifact will populate the local hash database by simply crawling a directory, hashing all files inside it and populated the database — this is useful to pre-populate the database with hashes of files created before Velociraptor was installed.</p><h3 id=conclusion>Conclusion</h3><p>Velociraptor brings unprecedented visibility to endpoint machine states using state of the art forensic capabilities. In this post we saw how parsing the USN Journal allows Velociraptor to gather information about past filesystem activity. We also saw how detection and monitoring queries can be used to respond to file modification or creation in near real time.</p><p>Finally we saw this capability put into practice by maintaining a local hash database which can be queried on demand to quickly answer questions like <em>which machine in my fleet contain this hash?</em></p><p>To play with this new feature yourself, take Velociraptor for a spin! It is a available on <a href=https://github.com/Velocidex/velociraptor>GitHub</a> under an open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2020/2020-12-13-velociraptor-and-osquery-2a4306dd23c/index.html b/blog/2020/2020-12-13-velociraptor-and-osquery-2a4306dd23c/index.html
index 55f1600d595..8d871a85005 100644
--- a/blog/2020/2020-12-13-velociraptor-and-osquery-2a4306dd23c/index.html
+++ b/blog/2020/2020-12-13-velociraptor-and-osquery-2a4306dd23c/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Digging deeper together…"><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor and OSQuery :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-12-13-velociraptor-and-osquery-2a4306dd23c/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-12-13-velociraptor-and-osquery-2a4306dd23c/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Velociraptor and OSQuery</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><ul><li><a href=#osquery-integration>OSQuery integration</a></li><li><a href=#lets-go-hunting>Let’s go hunting…</a></li><li><a href=#extending-osquery-with-vql>Extending OSQuery with VQL</a></li><li><a href=#conclusions>Conclusions</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags><div class=tags><a class=tag-link href=/tags/osquery>OSQuery</a></div></div><div id=body-inner><h1>Velociraptor and OSQuery</h1><p><img src=../../img/19ovPD0uFOFPmMydH9lHTlA.png alt></p><p>One of our favorite tools for endpoint visibility is <a href=https://github.com/osquery/osquery>OSQuery</a>. OSQuery has really transformed the state of endpoint visibility and DFIR by allowing analysts to flexibly issue queries to introspect endpoint state, just like a database. This flexibility has always been the inspiration for Velociraptor, and the development of the Velociraptor Query Language (VQL) followed the footsteps of OSQuery to provide a powerful and flexible query language.</p><p>However, while OSQuery provides a query engine with many plugins exposing machine state, it is not typically enough on its own. OSQuery itself does not provide a server, nor does it provide a GUI (there are a number of OSQuery servers, such as <a href=https://github.com/fleetdm/fleet>FleetDM/Fleet</a>).</p><p>While, Velociraptor was designed to be a scalable DFIR tool that is easy to deploy (typically <a href="https://www.youtube.com/watch?v=l1_sKDmNWS4&amp;t=550s">deployed in minutes</a>). It is typically more complicated to deploy OSQuery at scale, use it to hunt widely and post-process the results.</p><p>Nevertheless, OSQuery has been around for a long time, and there are many existing queries that could be used immediately, without needing to convert then to VQL first.</p><div class="mynotices tip"><div heading=tip><p>Velociraptor and OSQuery are not an either or choice — you can use
-them both at the same time!</p></div></div><p>In recent releases Velociraptor directly integrates OSQuery on all supported platforms — so you can issue the same OSQuery query you always did and it would work exactly the same within Velociraptor. This blog post explains how the integration is done, and we go though a typical example to how Velociraptor can use OSQuery to hunt through many machines quickly.</p><h3 id=osquery-integration>OSQuery integration</h3><p>OSQuery itself is a query engine — it is distributed a single executable which is capable of evaluating a query, and returning a result set (essentially a table of rows and columns). In this sense OSQuery is very similar to VQL queries, which also return a result set.</p><p>The goal of the OSQuery integration is to make OSQuery appear as a natural extension to VQL. That is, within Velociraptor, OSQuery output is indistinguishable from the output of native VQL queries. This allows one to filter and enrich the OSQuery query using standard VQL.</p><p>Let’s have a look at the VQL artifact that implements OSQuery integration</p><script src=https://gist.github.com/scudette/acb3daec29048a84a18a11977d710ecc.js></script><p>As described in a<a href=https://medium.com/velociraptor-ir/velociraptor-in-the-tool-age-d896dfe71b9> previous post</a>, Velociraptor will deliver the OSQuery binary to the endpoint securely (line 29–30), then shell out to the binary executing the provided query (line 32–34). Finally the result is parsed from JSON and returned as a standard VQL result set (line 36–39).</p><p>The entire OSQuery integration is implemented as above in VQL — one does not need to do anything else in order to launch an OSQuery query on a remote host… In particular, one does not need to have OSQuery installed on the endpoint in advance! Velociraptor will push the binary to the endpoint on demand, managing binary versioning if required and maintaining a local copy of OSQuery on the endpoint.</p><h3 id=lets-go-hunting>Let’s go hunting…</h3><p>Let’s look for an interesting OSQuery query that we might want to run. A great resource of public OSQuery queries can be found in Recon Infosec’s public OSQuery resource <a href=https://rhq.reconinfosec.com/tactics/lateral_movement/>https://rhq.reconinfosec.com/</a>. For this example I will choose the query looking for<a href=https://rhq.reconinfosec.com/tactics/lateral_movement/> SMB/Named Pipes</a>, written by Eric Capuano.</p><p><img src=../../img/1xDWUDCakSzp1rOEoFAX0nQ.png alt></p><p>A Named Pipe is a Windows IPC method that allows communication between different processes. Many attack tools open multiple processes, and use named pipes to communicate between those, <a href=https://labs.f-secure.com/blog/detecting-cobalt-strike-default-modules-via-named-pipe-analysis/>including metasploit or Cobalt Strike.</a></p><p>The query identifies processes using named pipes, making it a nice signal or a baseline for which processes in your environment typically communicate with pipes.</p><p>To test this query, I created a quick named pipe server in Powershell that creates a named pipe called <strong>BlackJack</strong>.</p><script src=https://gist.github.com/scudette/a520632012eb8abdc223fd27de24fb2f.js></script><p>After selecting my test machine in the Velociraptor GUI, I created a new collection then searched for the OSQuery artifact. Since this is a Windows system, I select the Windows variant of the artifact.</p><p><img src=../../img/1RVNYzIVcDFFheVsNVh6VNg.png alt></p><p>After selecting the <strong>Windows.OSQuery.Generic</strong> artifact, I can click the “Configure Parameters” screen where I am able to enter the OSQuery query to run.</p><p><img src=../../img/1EHhozA18vJkf_71fWEzixw.png alt></p><p>Finally I click the “Launch” button to start the new collection. This will collect the <strong>Windows.OSQuery.Generic</strong> artifact on this machine, Velociraptor will push the OSQuery binary to the endpoints and cache it locally. On subsequent collections, the endpoint will compare the local hash of the binary with the required hash and only fetch a new version if necessary — therefore subsequent executions are very rapid.</p><p><img src=../../img/1erZCLT_m1iht3lwyLXrjzQ.png alt></p><p>As can be seen above, the OSQuery query produces a table of results, indistinguishable from a typical Velociraptor artifact.</p><h3 id=extending-osquery-with-vql>Extending OSQuery with VQL</h3><p>The previous OSQuery query returns all the named pipes on the endpoint and their owner processes. Suppose we now wanted to build on this query and identify high value signals — for the sake of this example, suppose the named pipe “<strong>BlackJack</strong>” is a known malicious name belonging to a specific malware variant. Let us therefore, collect a process memory dump of all processes which open a named pipe with the name BlackJack for further analysis. We wish to do so by extending the OSQuery query we had earlier with some VQL.</p><p>I created a new custom Velociraptor artifact by wrapping some VQL around the existing OSQuery artifacts. To do this I click on the “View Artifacts” screen, select “Add an Artifact” and type the following YAML artifact into the GUI.</p><p><img src=../../img/1KP41G6qnjZSKb1M4HqjRbg.png alt></p><p>The full artifact text is also shown here.</p><script src=https://gist.github.com/scudette/94ce124c4c04c9955b76a3b8130dd8fc.js></script><p>Velociraptor Artifacts are simply YAML files which encapsulate VQL queries and provide the whole thing with a name. Users now simply need to collect the <strong>Custom.OSQuery.BlackJack</strong> artifact without needing to write their own VQL.</p><p>Let’s take a look at how this artifact works. The VQL simply calls the same <strong>Windows.OSQuery.Generic</strong> artifact we ran previously, it then filters the result set to only match the <strong>BlackJack</strong> pipe. For each matching process, the VQL then call the <strong>proc_dump()</strong> plugin to obtain a dump of process memory and then uploads it to the server.</p><p><img src=../../img/1S7hKtacdqBTHg_We6pG90A.png alt></p><p>The result is a 230Mb dump file that can be opened by the windows debugger for each process found holding a named pipe called BlackJack.</p><p>We can now hunt our entire deployment looking for specific named pipes in seconds.</p><h3 id=conclusions>Conclusions</h3><p>In this blog post I demonstrated how Velociraptor integrates OSQuery as a natural extension to the Velociraptor Query Language. To use OSQuery with Velociraptor, one simply collects the relevant artifact from the endpoint. Users do not need to have OSQuery installed on the endpoint — Velociraptor manages the distribution and update of the binary as needed transparently behind the scenes.</p><p>We then saw how to extend OSQuery queries seamlessly with the additional functionality built into Velociraptor, by capturing and uploading memory dumps as additional triaging artifacts.</p><p>So what are the pros and cons of using OSQuery within Velociraptor?</p><p>The biggest advantage of the OSQuery integration is that existing OSQuery queries just work without modifications. This avoids having to rewrite the same queries in VQL using Velociraptor’s native query language (and potentially having to learn yet another query language). Having the ability to directly use OSQuery queries makes all the OSQuery resources on the web immediately available for use with Velociraptor (For example <a href=https://community.carbonblack.com/t5/Query-Exchange/idb-p/query_exchange>Carbon Black’s Query Exchange</a>).</p><p>An obvious disadvantage of the integration is that Velociraptor still ends up shelling to OSQuery to actually perform the query — therefore Velociraptor has no control of the resource usage consumed by OSQuery during query execution (however cancelling the artifact collection will terminate the OSQuery process). While normal VQL queries have throttling setting controlling the CPU load, we lose this ability when running the OSQuery process.</p><p>To play with this feature yourself, take<a href=https://github.com/Velocidex/velociraptor> Velociraptor for a spin</a>! It is a available on GitHub under an open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+them both at the same time!</p></div></div><p>In recent releases Velociraptor directly integrates OSQuery on all supported platforms — so you can issue the same OSQuery query you always did and it would work exactly the same within Velociraptor. This blog post explains how the integration is done, and we go though a typical example to how Velociraptor can use OSQuery to hunt through many machines quickly.</p><h3 id=osquery-integration>OSQuery integration</h3><p>OSQuery itself is a query engine — it is distributed a single executable which is capable of evaluating a query, and returning a result set (essentially a table of rows and columns). In this sense OSQuery is very similar to VQL queries, which also return a result set.</p><p>The goal of the OSQuery integration is to make OSQuery appear as a natural extension to VQL. That is, within Velociraptor, OSQuery output is indistinguishable from the output of native VQL queries. This allows one to filter and enrich the OSQuery query using standard VQL.</p><p>Let’s have a look at the VQL artifact that implements OSQuery integration</p><script src=https://gist.github.com/scudette/acb3daec29048a84a18a11977d710ecc.js></script><p>As described in a<a href=https://medium.com/velociraptor-ir/velociraptor-in-the-tool-age-d896dfe71b9> previous post</a>, Velociraptor will deliver the OSQuery binary to the endpoint securely (line 29–30), then shell out to the binary executing the provided query (line 32–34). Finally the result is parsed from JSON and returned as a standard VQL result set (line 36–39).</p><p>The entire OSQuery integration is implemented as above in VQL — one does not need to do anything else in order to launch an OSQuery query on a remote host… In particular, one does not need to have OSQuery installed on the endpoint in advance! Velociraptor will push the binary to the endpoint on demand, managing binary versioning if required and maintaining a local copy of OSQuery on the endpoint.</p><h3 id=lets-go-hunting>Let’s go hunting…</h3><p>Let’s look for an interesting OSQuery query that we might want to run. A great resource of public OSQuery queries can be found in Recon Infosec’s public OSQuery resource <a href=https://rhq.reconinfosec.com/tactics/lateral_movement/>https://rhq.reconinfosec.com/</a>. For this example I will choose the query looking for<a href=https://rhq.reconinfosec.com/tactics/lateral_movement/> SMB/Named Pipes</a>, written by Eric Capuano.</p><p><img src=../../img/1xDWUDCakSzp1rOEoFAX0nQ.png alt></p><p>A Named Pipe is a Windows IPC method that allows communication between different processes. Many attack tools open multiple processes, and use named pipes to communicate between those, <a href=https://labs.f-secure.com/blog/detecting-cobalt-strike-default-modules-via-named-pipe-analysis/>including metasploit or Cobalt Strike.</a></p><p>The query identifies processes using named pipes, making it a nice signal or a baseline for which processes in your environment typically communicate with pipes.</p><p>To test this query, I created a quick named pipe server in Powershell that creates a named pipe called <strong>BlackJack</strong>.</p><script src=https://gist.github.com/scudette/a520632012eb8abdc223fd27de24fb2f.js></script><p>After selecting my test machine in the Velociraptor GUI, I created a new collection then searched for the OSQuery artifact. Since this is a Windows system, I select the Windows variant of the artifact.</p><p><img src=../../img/1RVNYzIVcDFFheVsNVh6VNg.png alt></p><p>After selecting the <strong>Windows.OSQuery.Generic</strong> artifact, I can click the “Configure Parameters” screen where I am able to enter the OSQuery query to run.</p><p><img src=../../img/1EHhozA18vJkf_71fWEzixw.png alt></p><p>Finally I click the “Launch” button to start the new collection. This will collect the <strong>Windows.OSQuery.Generic</strong> artifact on this machine, Velociraptor will push the OSQuery binary to the endpoints and cache it locally. On subsequent collections, the endpoint will compare the local hash of the binary with the required hash and only fetch a new version if necessary — therefore subsequent executions are very rapid.</p><p><img src=../../img/1erZCLT_m1iht3lwyLXrjzQ.png alt></p><p>As can be seen above, the OSQuery query produces a table of results, indistinguishable from a typical Velociraptor artifact.</p><h3 id=extending-osquery-with-vql>Extending OSQuery with VQL</h3><p>The previous OSQuery query returns all the named pipes on the endpoint and their owner processes. Suppose we now wanted to build on this query and identify high value signals — for the sake of this example, suppose the named pipe “<strong>BlackJack</strong>” is a known malicious name belonging to a specific malware variant. Let us therefore, collect a process memory dump of all processes which open a named pipe with the name BlackJack for further analysis. We wish to do so by extending the OSQuery query we had earlier with some VQL.</p><p>I created a new custom Velociraptor artifact by wrapping some VQL around the existing OSQuery artifacts. To do this I click on the “View Artifacts” screen, select “Add an Artifact” and type the following YAML artifact into the GUI.</p><p><img src=../../img/1KP41G6qnjZSKb1M4HqjRbg.png alt></p><p>The full artifact text is also shown here.</p><script src=https://gist.github.com/scudette/94ce124c4c04c9955b76a3b8130dd8fc.js></script><p>Velociraptor Artifacts are simply YAML files which encapsulate VQL queries and provide the whole thing with a name. Users now simply need to collect the <strong>Custom.OSQuery.BlackJack</strong> artifact without needing to write their own VQL.</p><p>Let’s take a look at how this artifact works. The VQL simply calls the same <strong>Windows.OSQuery.Generic</strong> artifact we ran previously, it then filters the result set to only match the <strong>BlackJack</strong> pipe. For each matching process, the VQL then call the <strong>proc_dump()</strong> plugin to obtain a dump of process memory and then uploads it to the server.</p><p><img src=../../img/1S7hKtacdqBTHg_We6pG90A.png alt></p><p>The result is a 230Mb dump file that can be opened by the windows debugger for each process found holding a named pipe called BlackJack.</p><p>We can now hunt our entire deployment looking for specific named pipes in seconds.</p><h3 id=conclusions>Conclusions</h3><p>In this blog post I demonstrated how Velociraptor integrates OSQuery as a natural extension to the Velociraptor Query Language. To use OSQuery with Velociraptor, one simply collects the relevant artifact from the endpoint. Users do not need to have OSQuery installed on the endpoint — Velociraptor manages the distribution and update of the binary as needed transparently behind the scenes.</p><p>We then saw how to extend OSQuery queries seamlessly with the additional functionality built into Velociraptor, by capturing and uploading memory dumps as additional triaging artifacts.</p><p>So what are the pros and cons of using OSQuery within Velociraptor?</p><p>The biggest advantage of the OSQuery integration is that existing OSQuery queries just work without modifications. This avoids having to rewrite the same queries in VQL using Velociraptor’s native query language (and potentially having to learn yet another query language). Having the ability to directly use OSQuery queries makes all the OSQuery resources on the web immediately available for use with Velociraptor (For example <a href=https://community.carbonblack.com/t5/Query-Exchange/idb-p/query_exchange>Carbon Black’s Query Exchange</a>).</p><p>An obvious disadvantage of the integration is that Velociraptor still ends up shelling to OSQuery to actually perform the query — therefore Velociraptor has no control of the resource usage consumed by OSQuery during query execution (however cancelling the artifact collection will terminate the OSQuery process). While normal VQL queries have throttling setting controlling the CPU load, we lose this ability when running the OSQuery process.</p><p>To play with this feature yourself, take<a href=https://github.com/Velocidex/velociraptor> Velociraptor for a spin</a>! It is a available on GitHub under an open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2020/2020-12-26-slack-and-velociraptor-b63803ba4b16/index.html b/blog/2020/2020-12-26-slack-and-velociraptor-b63803ba4b16/index.html
index b97ee371ba2..6d72fbf93aa 100644
--- a/blog/2020/2020-12-26-slack-and-velociraptor-b63803ba4b16/index.html
+++ b/blog/2020/2020-12-26-slack-and-velociraptor-b63803ba4b16/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="This post covers integration with Slack to provide an escalation mechanism. The Slack API is a typical REST API so the lessons in this post are directly applicable to many other systems..."><link rel=icon href=/images/favicon.png type=image/png><title>Slack and Velociraptor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-12-26-slack-and-velociraptor-b63803ba4b16/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/2020-12-26-slack-and-velociraptor-b63803ba4b16/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Slack and Velociraptor</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><ul><li><a href=#creating-a-slack-app>Creating a Slack App</a></li><li><a href=#posting-a-message-from-velociraptor>Posting a message from Velociraptor</a></li><li><a href=#alerting-on-events>Alerting on events</a></li><li><a href=#step-1-is-the-client-online-now>Step 1: Is the client online now?</a></li><li><a href=#step-2-alert-for-recently-seen-clients>Step 2: Alert for recently seen clients</a></li><li><a href=#step-3-removing-the-client-from-the-watchlist>Step 3: Removing the client from the watchlist</a></li><li><a href=#step-4-creating-a-monitoring-artifact>Step 4: Creating a monitoring artifact</a></li><li><a href=#step-5-install-the-artifact>Step 5: Install the artifact</a></li><li><a href=#conclusions>Conclusions</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags><div class=tags><a class=tag-link href=/tags/vql>VQL</a>
 <a class=tag-link href=/tags/slack>Slack</a>
-<a class=tag-link href=/tags/integration>Integration</a></div></div><div id=body-inner><h1>Slack and Velociraptor</h1><p><figure><img src="https://cdn-images-1.medium.com/max/12030/0*bkglpXK2FLycHuia?width=600px" alt='Photo by <a href="https://unsplash.com/@gamell?utm_source=medium&amp;amp;utm_medium=referral">Joan Gamell</a> on <a href="https://unsplash.com?utm_source=medium&amp;amp;utm_medium=referral">Unsplash</a>' class=captioned><figcaption>Photo by &lt;a href="https://unsplash.com/@gamell?utm_source=medium&amp;amp;utm_medium=referral">Joan Gamell&lt;/a> on &lt;a href="https://unsplash.com?utm_source=medium&amp;amp;utm_medium=referral">Unsplash&lt;/a></figcaption></figure><em>Photo by <a href="https://unsplash.com/@gamell?utm_source=medium&amp;utm_medium=referral">Joan Gamell</a> on <a href="https://unsplash.com?utm_source=medium&amp;utm_medium=referral">Unsplash</a></em></p><p>You might have heard of <a href=https://slack.com/>Slack</a> — a chatting app that has grown in popularity over the past few years. Slack allows for API access to the the workspaces, which opens the door to novel applications and automation.</p><p>In this blog post I will demonstrate how to connect Slack to Velociraptor, and be notified within a Slack channel of various events that happen on your Velociraptor deployment.</p><h3 id=creating-a-slack-app>Creating a Slack App</h3><p>The first thing I will do is create a Slack channel to receives messages from Velociraptor. This keeps Velociraptor messages separate and I can subscribe a small number of users within my Slack workspace to that channel.</p><p>I will create a new channel called “alerts”</p><p>Next I will create an App which will communicate with the workspace and be able to post messages to the alerts channel. (This <a href=https://api.slack.com/start/overview#creating>reference </a>has a lot of details on this step, which I will just skip but you should consult it for your own use). First I visit the slack API page at <a href=../../img/apps>https://api.slack.com/apps</a></p><p><img src=../../img/14J5S4V0jlkVLvFKI3SaeUA.png alt></p><p>Next I will create an app called “Velociraptor” that will be able to push messages to my workspace.</p><p><img src=../../img/19RCHElLgfXOSdioPqfE28g.png alt></p><p>Since I just want Velociraptor to inform me about events, it really only needs to push messages. I will therefore select the “Incoming Webhooks” app type.</p><p><img src=../../img/1hzeftjwj-ItD5h_H_eE62g.png alt></p><p>Enable the webhook by sliding the option to on</p><p><img src=../../img/1EVMLGulrWcrmJfhHb9hRUA.png alt></p><p>Webhooks are simply HTTP REST APIs which can be used by any software to post to the channel providing they have a special secret called a “Token”. I can add a new webhook to my workspace on this page</p><p><img src=../../img/1WWBAXXo9zmQ4WFkeSvuhLQ.png alt></p><p>I now allow the webhook to post to the alerts channel</p><p><img src=../../img/1uAS5ZvGflIp_-zl2STlYpg.png alt></p><p>Posting the message is a very simple HTTP request — Slack even shows an example using curl</p><p><img src=../../img/1mubZvdsnaLV-fB_tfQpQNw.png alt></p><p>The curl command line indicates that the request:</p><ol><li><p>Needs to be using the POST method</p></li><li><p>Needs to have a content type of <em>application/json</em></p></li><li><p>Needs to POST a JSON encoded object with a key called “text” which contains the message text.</p></li></ol><h3 id=posting-a-message-from-velociraptor>Posting a message from Velociraptor</h3><p>Next I will test my new webhook by writing a quick VQL query in a Velociraptor notebook. I like to develop my VQL in a notebook, since that allows me to easily iterate over my query. Going to my Velociraptor console, I add a new notebook and add a VQL cell.</p><p><img src=../../img/1GBkeEP6PTZnNttmw1B_Q1A.png alt></p><p>Here I am just replicating the curl command line above using VQL’s http_client plugin. Once I save the cell, Velociraptor will make an API request to the slack servers and my message will appear in the alerts channel.</p><p><img src=../../img/12QiKAIh7vZ0A9Xe9y3rtOg.png alt></p><h3 id=alerting-on-events>Alerting on events</h3><p>Sending messages to Slack is pretty cool, but we really want to know when interesting stuff happens in response to events. One interesting use case that people always ask me about is to alert when a particular machine comes back online so it can be interactively investigated.</p><p>From a usability perspective, I want to tell the server to monitor a number of endpoints, and then when each comes back online, send a Slack message and stop monitoring that system.</p><p>Whenever I have a set of machines that we want to operate on, I think of client labels. In Velociraptor, we can attach any number of labels to a client, and then search for all machines that have the label efficiently (this effectively creates a group of machines).</p><p>I will add the label “Slack” to my test machine by simply selecting it in the client search page and clicking the “Add Label” button.</p><p><img src=../../img/1uKNwvvn723Ygr_STiMwsNg.png alt></p><p>Going back to my notebook, I am ready to develop this VQL query step by step.</p><h3 id=step-1-is-the-client-online-now>Step 1: Is the client online now?</h3><p>The first query I will write will return all the clients in the <strong>“Slack”</strong> label group, and show how many seconds ago they were online.</p><p><img src=../../img/1wCX-kCRmOvkUZcgHYj3_ug.png alt></p><p>I am using the now() VQL function to return the number of seconds since the epoch. The client’s <strong>last_seen_at</strong> time is given as microseconds since the epoch so I quickly convert it to seconds.</p><p>I can quickly retrieve the clients in the <strong>“Slack”</strong> label group by using the clients() plugin and applying a search expression “label:Slack”. Note that searching the clients by label in this way is much more efficient since it uses the label index rather than a row scan over all clients.</p><h3 id=step-2-alert-for-recently-seen-clients>Step 2: Alert for recently seen clients</h3><p>The next step is to send a Slack message for all clients which have been seen recently (say in the last 5 minutes).</p><p><img src=../../img/124ZL5EICiE_pZYKfTlPj7w.png alt></p><p>I add a WHERE Condition to the previous query, then for each client, I re-use my earlier Slack query to post a message informing me which client is online.</p><p><img src=../../img/1eKxlzgJgqGbbpIBDCYgTLQ.png alt></p><h3 id=step-3-removing-the-client-from-the-watchlist>Step 3: Removing the client from the watchlist</h3><p>Once I sent a slack alert for this client, I do not want to check it again. Let’s modify the above query to remove the label as well.</p><p><img src=../../img/19a5wyFGxAik1oa1I8Qe4Uw.png alt></p><h3 id=step-4-creating-a-monitoring-artifact>Step 4: Creating a monitoring artifact</h3><p>We previously saw how I can check for clients and send slack messages in the notebook. While this is fun and helps to develop VQL, in order to actually run this, we need to have the server monitoring for new clients all the time — in other words we need a Monitoring (Or Events) Artifact.</p><p>The previous query just ran once and stopped, but I really want to run it continuously every minute say. I do this by running the previous query periodically using the <strong>clock()</strong> plugin.</p><p>I go to the “View Artifacts” sidebar and then click the “Add an artifact” button.</p><p><img src=../../img/1ZKfuzpZHTGCd3b2mOEcGPg.png alt></p><p>The two main differences here are that this is a SERVER_EVENT artifact — i.e. it is running on the server continuously. I then use the clock() plugin to trigger the previous query to run every minute and scan for new clients coming online (line 27: <strong>foreach</strong> <strong>clock</strong> event, run the <strong>send_message</strong> query).</p><h3 id=step-5-install-the-artifact>Step 5: Install the artifact</h3><p>To install the artifact on the server, I will go to the Server Monitoring screen, and add it in the search view by clicking the “update server monitoring table” toolbar button.</p><p><img src=../../img/1nsoI3t2io_Ww8gbCxptniw.png alt></p><p>Now I can add the label to any client I am interested in and within a minute of it coming back online I will receive an alert in my slack channel</p><p><img src=../../img/1_RuYRGYKlwA7VeMkExYcyA.png alt></p><h3 id=conclusions>Conclusions</h3><p>In this post we saw how to make outbound REST API calls from the Velociraptor server using VQL. The example of Slack integration is a great use case for such an artifact, but there are many systems using HTTP style APIs (RESTfull or not) to be able to receive information from Velociraptor.</p><p>We saw how VQL can be written to run a continuous monitoring query on the server, checking for a condition that we are interested in. You could probably think of many examples of events that you will want to be notified of in a similar way (e.g. psexec used on any endpoint can be detected in near real time and escalated automatically to a Slack channel, or getting notified when a critical domain account is used anywhere on the network).</p><p>Escalating to Slack is suitable for fairly low frequency but high value events. If there are too many events, the channel will be too noisy and not useful (people will just mute it), so consider how frequently the alert will be fired, and how you intend to deal with it.</p><p>To play with this feature yourself, take<a href=https://github.com/Velocidex/velociraptor> Velociraptor for a spin</a>! It is a available on GitHub under an open source license. If you want to learn more about VQL and Velociraptor consider joining us on one of our <a href=https://www.velocidex.com/training/>upcoming training sessions</a>.</p><p>As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<a class=tag-link href=/tags/integration>Integration</a></div></div><div id=body-inner><h1>Slack and Velociraptor</h1><p><figure><img src="https://cdn-images-1.medium.com/max/12030/0*bkglpXK2FLycHuia?width=600px" alt='Photo by <a href="https://unsplash.com/@gamell?utm_source=medium&amp;amp;utm_medium=referral">Joan Gamell</a> on <a href="https://unsplash.com?utm_source=medium&amp;amp;utm_medium=referral">Unsplash</a>' class=captioned><figcaption>Photo by &lt;a href="https://unsplash.com/@gamell?utm_source=medium&amp;amp;utm_medium=referral">Joan Gamell&lt;/a> on &lt;a href="https://unsplash.com?utm_source=medium&amp;amp;utm_medium=referral">Unsplash&lt;/a></figcaption></figure><em>Photo by <a href="https://unsplash.com/@gamell?utm_source=medium&amp;utm_medium=referral">Joan Gamell</a> on <a href="https://unsplash.com?utm_source=medium&amp;utm_medium=referral">Unsplash</a></em></p><p>You might have heard of <a href=https://slack.com/>Slack</a> — a chatting app that has grown in popularity over the past few years. Slack allows for API access to the the workspaces, which opens the door to novel applications and automation.</p><p>In this blog post I will demonstrate how to connect Slack to Velociraptor, and be notified within a Slack channel of various events that happen on your Velociraptor deployment.</p><h3 id=creating-a-slack-app>Creating a Slack App</h3><p>The first thing I will do is create a Slack channel to receives messages from Velociraptor. This keeps Velociraptor messages separate and I can subscribe a small number of users within my Slack workspace to that channel.</p><p>I will create a new channel called “alerts”</p><p>Next I will create an App which will communicate with the workspace and be able to post messages to the alerts channel. (This <a href=https://api.slack.com/start/overview#creating>reference </a>has a lot of details on this step, which I will just skip but you should consult it for your own use). First I visit the slack API page at <a href=../../img/apps>https://api.slack.com/apps</a></p><p><img src=../../img/14J5S4V0jlkVLvFKI3SaeUA.png alt></p><p>Next I will create an app called “Velociraptor” that will be able to push messages to my workspace.</p><p><img src=../../img/19RCHElLgfXOSdioPqfE28g.png alt></p><p>Since I just want Velociraptor to inform me about events, it really only needs to push messages. I will therefore select the “Incoming Webhooks” app type.</p><p><img src=../../img/1hzeftjwj-ItD5h_H_eE62g.png alt></p><p>Enable the webhook by sliding the option to on</p><p><img src=../../img/1EVMLGulrWcrmJfhHb9hRUA.png alt></p><p>Webhooks are simply HTTP REST APIs which can be used by any software to post to the channel providing they have a special secret called a “Token”. I can add a new webhook to my workspace on this page</p><p><img src=../../img/1WWBAXXo9zmQ4WFkeSvuhLQ.png alt></p><p>I now allow the webhook to post to the alerts channel</p><p><img src=../../img/1uAS5ZvGflIp_-zl2STlYpg.png alt></p><p>Posting the message is a very simple HTTP request — Slack even shows an example using curl</p><p><img src=../../img/1mubZvdsnaLV-fB_tfQpQNw.png alt></p><p>The curl command line indicates that the request:</p><ol><li><p>Needs to be using the POST method</p></li><li><p>Needs to have a content type of <em>application/json</em></p></li><li><p>Needs to POST a JSON encoded object with a key called “text” which contains the message text.</p></li></ol><h3 id=posting-a-message-from-velociraptor>Posting a message from Velociraptor</h3><p>Next I will test my new webhook by writing a quick VQL query in a Velociraptor notebook. I like to develop my VQL in a notebook, since that allows me to easily iterate over my query. Going to my Velociraptor console, I add a new notebook and add a VQL cell.</p><p><img src=../../img/1GBkeEP6PTZnNttmw1B_Q1A.png alt></p><p>Here I am just replicating the curl command line above using VQL’s http_client plugin. Once I save the cell, Velociraptor will make an API request to the slack servers and my message will appear in the alerts channel.</p><p><img src=../../img/12QiKAIh7vZ0A9Xe9y3rtOg.png alt></p><h3 id=alerting-on-events>Alerting on events</h3><p>Sending messages to Slack is pretty cool, but we really want to know when interesting stuff happens in response to events. One interesting use case that people always ask me about is to alert when a particular machine comes back online so it can be interactively investigated.</p><p>From a usability perspective, I want to tell the server to monitor a number of endpoints, and then when each comes back online, send a Slack message and stop monitoring that system.</p><p>Whenever I have a set of machines that we want to operate on, I think of client labels. In Velociraptor, we can attach any number of labels to a client, and then search for all machines that have the label efficiently (this effectively creates a group of machines).</p><p>I will add the label “Slack” to my test machine by simply selecting it in the client search page and clicking the “Add Label” button.</p><p><img src=../../img/1uKNwvvn723Ygr_STiMwsNg.png alt></p><p>Going back to my notebook, I am ready to develop this VQL query step by step.</p><h3 id=step-1-is-the-client-online-now>Step 1: Is the client online now?</h3><p>The first query I will write will return all the clients in the <strong>“Slack”</strong> label group, and show how many seconds ago they were online.</p><p><img src=../../img/1wCX-kCRmOvkUZcgHYj3_ug.png alt></p><p>I am using the now() VQL function to return the number of seconds since the epoch. The client’s <strong>last_seen_at</strong> time is given as microseconds since the epoch so I quickly convert it to seconds.</p><p>I can quickly retrieve the clients in the <strong>“Slack”</strong> label group by using the clients() plugin and applying a search expression “label:Slack”. Note that searching the clients by label in this way is much more efficient since it uses the label index rather than a row scan over all clients.</p><h3 id=step-2-alert-for-recently-seen-clients>Step 2: Alert for recently seen clients</h3><p>The next step is to send a Slack message for all clients which have been seen recently (say in the last 5 minutes).</p><p><img src=../../img/124ZL5EICiE_pZYKfTlPj7w.png alt></p><p>I add a WHERE Condition to the previous query, then for each client, I re-use my earlier Slack query to post a message informing me which client is online.</p><p><img src=../../img/1eKxlzgJgqGbbpIBDCYgTLQ.png alt></p><h3 id=step-3-removing-the-client-from-the-watchlist>Step 3: Removing the client from the watchlist</h3><p>Once I sent a slack alert for this client, I do not want to check it again. Let’s modify the above query to remove the label as well.</p><p><img src=../../img/19a5wyFGxAik1oa1I8Qe4Uw.png alt></p><h3 id=step-4-creating-a-monitoring-artifact>Step 4: Creating a monitoring artifact</h3><p>We previously saw how I can check for clients and send slack messages in the notebook. While this is fun and helps to develop VQL, in order to actually run this, we need to have the server monitoring for new clients all the time — in other words we need a Monitoring (Or Events) Artifact.</p><p>The previous query just ran once and stopped, but I really want to run it continuously every minute say. I do this by running the previous query periodically using the <strong>clock()</strong> plugin.</p><p>I go to the “View Artifacts” sidebar and then click the “Add an artifact” button.</p><p><img src=../../img/1ZKfuzpZHTGCd3b2mOEcGPg.png alt></p><p>The two main differences here are that this is a SERVER_EVENT artifact — i.e. it is running on the server continuously. I then use the clock() plugin to trigger the previous query to run every minute and scan for new clients coming online (line 27: <strong>foreach</strong> <strong>clock</strong> event, run the <strong>send_message</strong> query).</p><h3 id=step-5-install-the-artifact>Step 5: Install the artifact</h3><p>To install the artifact on the server, I will go to the Server Monitoring screen, and add it in the search view by clicking the “update server monitoring table” toolbar button.</p><p><img src=../../img/1nsoI3t2io_Ww8gbCxptniw.png alt></p><p>Now I can add the label to any client I am interested in and within a minute of it coming back online I will receive an alert in my slack channel</p><p><img src=../../img/1_RuYRGYKlwA7VeMkExYcyA.png alt></p><h3 id=conclusions>Conclusions</h3><p>In this post we saw how to make outbound REST API calls from the Velociraptor server using VQL. The example of Slack integration is a great use case for such an artifact, but there are many systems using HTTP style APIs (RESTfull or not) to be able to receive information from Velociraptor.</p><p>We saw how VQL can be written to run a continuous monitoring query on the server, checking for a condition that we are interested in. You could probably think of many examples of events that you will want to be notified of in a similar way (e.g. psexec used on any endpoint can be detected in near real time and escalated automatically to a Slack channel, or getting notified when a critical domain account is used anywhere on the network).</p><p>Escalating to Slack is suitable for fairly low frequency but high value events. If there are too many events, the channel will be too noisy and not useful (people will just mute it), so consider how frequently the alert will be fired, and how you intend to deal with it.</p><p>To play with this feature yourself, take<a href=https://github.com/Velocidex/velociraptor> Velociraptor for a spin</a>! It is a available on GitHub under an open source license. If you want to learn more about VQL and Velociraptor consider joining us on one of our <a href=https://www.velocidex.com/training/>upcoming training sessions</a>.</p><p>As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2020/index.html b/blog/2020/index.html
index c01e7afb952..19be64db0e8 100644
--- a/blog/2020/index.html
+++ b/blog/2020/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>2020 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2020/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=top-github-link><a class=github-link title='Edit this page' href=https://github.com/Velocidex/velociraptor-docs/edit/master/content/blog/2020/_index.md target=blank><i class="fas fa-code-branch"></i>
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>2020</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>2020</h1><ul class="children children-div"><div><a href=/blog/2020/2020-12-26-slack-and-velociraptor-b63803ba4b16/>Slack and Velociraptor</a></div><div><a href=/blog/2020/2020-12-13-velociraptor-and-osquery-2a4306dd23c/>Velociraptor and OSQuery</a></div><div><a href=/blog/2020/2020-11-13-the-windows-usn-journal-f0c55c9010e/>The Windows USN Journal</a></div><div><a href=/blog/2020/2020-09-28-velociraptor-network-communications-30568624043a/>Velociraptor Communications</a></div><div><a href=/blog/2020/2020-08-17-velociraptor-sso-authentication-6dd68d46dccf/>Velociraptor SSO Authentication</a></div><div><a href=/blog/2020/2020-08-16-profiling-the-beast-58913437fd16/>Profiling the beast</a></div><div><a href=/blog/2020/2020-07-14-triage-with-velociraptor-pt-4-cf0e60810d1e/>Triage with Velociraptor — Pt 4</a></div><div><a href=/blog/2020/2020-07-13-velociraptor-in-the-tool-age-d896dfe71b9/>Velociraptor in the tool age</a></div><div><a href=/blog/2020/2020-06-19-the-velociraptor-query-language-pt-2-fe92bb7aa150/>The Velociraptor Query Language Pt 2</a></div><div><a href=/blog/2020/2020-06-14-the-velociraptor-query-language-pt-1-d721bff100bf/>The Velociraptor Query Language Pt 1</a></div><div><a href=/blog/2020/2020-04-16-velociraptor-e48a47e0317d/>Velociraptor</a></div><div><a href=/blog/2020/2020-03-29-velociraptors-acl-model-7f497575daee/>Velociraptor’s ACL model</a></div><div><a href=/blog/2020/2020-03-28-velociraptor-notebooks-d02e0bd11230/>Velociraptor notebooks</a></div><div><a href=/blog/2020/2020-03-07-extending-vql-plugins-7fb004cb6ec4/>Extending VQL plugins</a></div><div><a href=/blog/2020/2020-03-06-velociraptor-post-processing-with-jupyter-notebook-and-pandas-8a344d05ee8c/>Velociraptor Post-processing with Jupyter Notebook and Pandas</a></div><div><a href=/blog/2020/2020-01-12_hunting-malware-using-mutants-ea08e86dfc19/>Hunting Malware using Mutants</a></div></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<span class=links>2020</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>2020</h1><ul class="children children-div"><div><a href=/blog/2020/2020-12-26-slack-and-velociraptor-b63803ba4b16/>Slack and Velociraptor</a></div><div><a href=/blog/2020/2020-12-13-velociraptor-and-osquery-2a4306dd23c/>Velociraptor and OSQuery</a></div><div><a href=/blog/2020/2020-11-13-the-windows-usn-journal-f0c55c9010e/>The Windows USN Journal</a></div><div><a href=/blog/2020/2020-09-28-velociraptor-network-communications-30568624043a/>Velociraptor Communications</a></div><div><a href=/blog/2020/2020-08-17-velociraptor-sso-authentication-6dd68d46dccf/>Velociraptor SSO Authentication</a></div><div><a href=/blog/2020/2020-08-16-profiling-the-beast-58913437fd16/>Profiling the beast</a></div><div><a href=/blog/2020/2020-07-14-triage-with-velociraptor-pt-4-cf0e60810d1e/>Triage with Velociraptor — Pt 4</a></div><div><a href=/blog/2020/2020-07-13-velociraptor-in-the-tool-age-d896dfe71b9/>Velociraptor in the tool age</a></div><div><a href=/blog/2020/2020-06-19-the-velociraptor-query-language-pt-2-fe92bb7aa150/>The Velociraptor Query Language Pt 2</a></div><div><a href=/blog/2020/2020-06-14-the-velociraptor-query-language-pt-1-d721bff100bf/>The Velociraptor Query Language Pt 1</a></div><div><a href=/blog/2020/2020-04-16-velociraptor-e48a47e0317d/>Velociraptor</a></div><div><a href=/blog/2020/2020-03-29-velociraptors-acl-model-7f497575daee/>Velociraptor’s ACL model</a></div><div><a href=/blog/2020/2020-03-28-velociraptor-notebooks-d02e0bd11230/>Velociraptor notebooks</a></div><div><a href=/blog/2020/2020-03-07-extending-vql-plugins-7fb004cb6ec4/>Extending VQL plugins</a></div><div><a href=/blog/2020/2020-03-06-velociraptor-post-processing-with-jupyter-notebook-and-pandas-8a344d05ee8c/>Velociraptor Post-processing with Jupyter Notebook and Pandas</a></div><div><a href=/blog/2020/2020-01-12_hunting-malware-using-mutants-ea08e86dfc19/>Hunting Malware using Mutants</a></div></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-01-19-parsing-binary-files-d31114a41f14/index.html b/blog/2021/2021-01-19-parsing-binary-files-d31114a41f14/index.html
index 0e617a16001..4f8de0d3167 100644
--- a/blog/2021/2021-01-19-parsing-binary-files-d31114a41f14/index.html
+++ b/blog/2021/2021-01-19-parsing-binary-files-d31114a41f14/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Using VQL to parse binary data"><link rel=icon href=/images/favicon.png type=image/png><title>Parsing binary files :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-01-19-parsing-binary-files-d31114a41f14/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-01-19-parsing-binary-files-d31114a41f14/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -88,4 +88,4 @@
 example of using it to develop a powerful Velociraptor artifact.</p><h3 id=binary-parsing-overview>Binary parsing overview.</h3><p>Binary files store information for machine consumption — this is termed serialization. Ultimately serialization is a way to represent data as binary digits by encoding integers, structs and other concepts into a binary representation.</p><p>While it is certainly possible to write parsers that procedurally unpack various bits of data from the file, these are typically hard to maintain and understand. It is better to visualize what the data actually means and how it is laid onto the file. Therefore we want to write parsers in a descriptive way rather than procedural — Ideally we want the parser to be easy to understand and maintain.</p><p>Velociraptor’s binary parser has taken inspiration from other great parsers, such as Volatility and Rekall’s Vtype system (with some syntax simplification).</p><p>The best way to introduce the new parser is with an example so I will jump straight in!</p><h3 id=certutil-metadata-parsing><code>Certutil</code> metadata parsing</h3><p>The <code>certutil</code> program is a native, built in Windows tool used to download certificate information. It is a commonly used <a href=https://lolbas-project.github.io/lolbas/Binaries/Certutil/>Lolbin</a>, with attackers misusing the tool to download malicious code to compromised endpoints (see <a href=https://attack.mitre.org/software/S0160/>Att&amp;ck S0160</a>).</p><p>I was reading an excellent blog post recently titled <a href=https://u0041.co/blog/post/3><code>Certutil</code> Artifacts Analysis</a> where <code>Aalfaifi</code> analyses the forensic evidence left behind by <code>certutil</code>. Let’s write a parser for this!</p><p>We start off by using <code>certutil</code> in a malicious way — rather than downloading certificate revocation lists we will download an executable to the system for testing.</p><p><img src=../../img/1c9DTl-Q04OAFY9T6CUidfw.png alt></p><p>The <code>certutil</code> tool will download our executable and create a metadata file containing some very interesting data but what does it mean?</p><p><img src=../../img/13ZKzTgDOewJinIZPEk_5TQ.png alt></p><p>Luckily <code>Aalfaifi</code> has done the sleuthing work and their excellent article covers the details. I will interactively develop my VQL parser using the Velociraptor notebook. I first add a new notebook then add a VQL cell to it. I can now write and evaluate free form VQL.</p><p>Let’s begin by just hard coding the path to the metadata file I created. I will also define a profile and an initial struct called Header.</p><p><img src=../../img/1Dr6MW-g3e7l_adVaf0ZpSw.png alt></p><h3 id=what-is-a-profile>What is a profile?</h3><p>A profile is a data driven template that describes how the data is overlaid onto the binary file. Velociraptor uses the profile to drive the parser but the profile is also meant for human consumption — it simply describes all the structs and their fields, sizes etc. Profiles are designed to be succinct and quick to write but also easy to read and understand.</p><p>The basic structure of a profile is a JSON encoded data structure:</p><ul><li><p>The Profile contains a list of struct definitions</p></li><li><p>Each struct definition is a list of <strong>[name, size, list of field definitions]</strong></p></li><li><p>Each field definition is a list of** [name, offset, type, options]**</p></li></ul><p>I will start to define the Header struct with the following fields (offsets and fields taken from the Blog post above)</p><ul><li><p>UrlSize is a 32 bit integer laid at offset 12</p></li><li><p>HashSize is a 32 bit integer laid at offset 100</p></li><li><p>DownloadTime is a 64 bit timestamp at offset 16</p></li></ul><p>You can see the profile and the resulting object in the screenshot below. Velociraptor calls the parse_binary() VQL function which opens the file and parses the struct <strong>Header</strong> at offset 0.</p><p><img src=../../img/1WsI7L2niMYLC_N08v-eP1g.png alt></p><h3 id=dynamic-properties>Dynamic properties</h3><p>So far things are simple — we specified the offsets and types of each field and Velociraptor just parsed them. However, now we want to extract the URL. According to the Blog post the URL starts at offset 116 and has a length specified by the UrlSize field. It is then followed by the hash with a length specified by the HashSize field.</p><p>Because the offsets and sizes are not known in advance (URLs have different lengths), we need to define the profile dynamically. The profile will accept a <strong>VQL lambda</strong> function in many places. The lambda function receives the partially parsed struct and can use it to derive other values dynamically at runtime.</p><p>We can specify the URL as being a <strong>String</strong> type with a length determined dynamically by the <strong>x.UrlSize</strong> field. Similarly we can declare the offset of the Hash field as the lambda <strong>x=>x.UrlSize + 116</strong></p><p><img src=../../img/1HZ7HGESjXWLR3DfapFOAxA.png alt></p><p><img src=../../img/1S3LmbPVR8HpY1dgojr1kxA.png alt></p><h3 id=putting-it-all-together>Putting it all together</h3><p>This was easy! We now know the url the <code>certutil</code> tool downloaded
 from, the hash and the timestamp — all are critical in a DFIR
 investigation to distinguish the legitimate use of <code>certutil</code> from
-malicious.</p><p>While the above VQL only parsed a single hard coded metadata file, in practice we want to search for all metadata files from all users and parse them in a single collection.</p><p>You can see the full artifact here <a href=https://github.com/Velocidex/velociraptor/blob/master/artifacts/definitions/Windows/Forensics/CertUtil.yaml>https://github.com/Velocidex/velociraptor/blob/master/artifacts/definitions/Windows/Forensics/CertUtil.yaml</a> including extra functionality like filtering out whitelisted domains, and an option to also fetch the downloaded file from the <strong>CryptUrlCache</strong></p><h3 id=collecting-the-new-artifact>Collecting the new <strong>artifact</strong></h3><p>I will now collect the artifact from my endpoint. Using the GUI, I click the <strong>add new collection</strong> button, then search for my <strong>Windows.Forensics.CertUtil</strong> artifact.</p><p><img src=../../img/1j1yRTbk4mFoWNPBWKHHevA.png alt></p><p>Now I can configure the whitelist and possibly also choose to download the cached files.</p><p><img src=../../img/1djMNYeKuRJ5xISGh7ssg9Q.png alt></p><p>The files are parsed on the endpoint and we see the relevant information in seconds</p><p><img src=../../img/1W9X8wH91FoezNlOk4gXzuA.png alt></p><p>Doing a hunt across all my endpoints will now tell me if <code>certutil</code> was ever used to download a suspicious tool, from where, and potentially uploading the tool itself in the <strong>CryptUrlCache</strong>.</p><h3 id=conclusions>Conclusions</h3><p>Although this was a simple example, the binary parser is extremely capable. Some other examples include <strong>Windows.System.Powershell.ModuleAnalysisCache</strong> (parses the powershell module analysis cache) and <strong>Windows.Forensic.Lnk</strong> (Parse link files) and many more.</p><p>Being able to go from reading an analysis in a blog post to running a hunt across your entire network in a matter of minutes is a truly powerful capability, allowing our DFIR team to be proactive and innovative. Having a powerful binary parser in your toolbox is a real bonus making many types of hunts possible.</p><p>If you are interested in learning more about Velociraptor, check out our hands on training courses on <a href=https://www.velocidex.com/training/>https://www.velocidex.com/training/</a> or join us on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+malicious.</p><p>While the above VQL only parsed a single hard coded metadata file, in practice we want to search for all metadata files from all users and parse them in a single collection.</p><p>You can see the full artifact here <a href=https://github.com/Velocidex/velociraptor/blob/master/artifacts/definitions/Windows/Forensics/CertUtil.yaml>https://github.com/Velocidex/velociraptor/blob/master/artifacts/definitions/Windows/Forensics/CertUtil.yaml</a> including extra functionality like filtering out whitelisted domains, and an option to also fetch the downloaded file from the <strong>CryptUrlCache</strong></p><h3 id=collecting-the-new-artifact>Collecting the new <strong>artifact</strong></h3><p>I will now collect the artifact from my endpoint. Using the GUI, I click the <strong>add new collection</strong> button, then search for my <strong>Windows.Forensics.CertUtil</strong> artifact.</p><p><img src=../../img/1j1yRTbk4mFoWNPBWKHHevA.png alt></p><p>Now I can configure the whitelist and possibly also choose to download the cached files.</p><p><img src=../../img/1djMNYeKuRJ5xISGh7ssg9Q.png alt></p><p>The files are parsed on the endpoint and we see the relevant information in seconds</p><p><img src=../../img/1W9X8wH91FoezNlOk4gXzuA.png alt></p><p>Doing a hunt across all my endpoints will now tell me if <code>certutil</code> was ever used to download a suspicious tool, from where, and potentially uploading the tool itself in the <strong>CryptUrlCache</strong>.</p><h3 id=conclusions>Conclusions</h3><p>Although this was a simple example, the binary parser is extremely capable. Some other examples include <strong>Windows.System.Powershell.ModuleAnalysisCache</strong> (parses the powershell module analysis cache) and <strong>Windows.Forensic.Lnk</strong> (Parse link files) and many more.</p><p>Being able to go from reading an analysis in a blog post to running a hunt across your entire network in a matter of minutes is a truly powerful capability, allowing our DFIR team to be proactive and innovative. Having a powerful binary parser in your toolbox is a real bonus making many types of hunts possible.</p><p>If you are interested in learning more about Velociraptor, check out our hands on training courses on <a href=https://www.velocidex.com/training/>https://www.velocidex.com/training/</a> or join us on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-01-22-concurrent-vql-6d381fdb0b1f/index.html b/blog/2021/2021-01-22-concurrent-vql-6d381fdb0b1f/index.html
index f202b7a4c9b..b1326e794f6 100644
--- a/blog/2021/2021-01-22-concurrent-vql-6d381fdb0b1f/index.html
+++ b/blog/2021/2021-01-22-concurrent-vql-6d381fdb0b1f/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Digging even faster…"><link rel=icon href=/images/favicon.png type=image/png><title>Concurrent VQL :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-01-22-concurrent-vql-6d381fdb0b1f/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-01-22-concurrent-vql-6d381fdb0b1f/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Concurrent VQL</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><ul><li><a href=#simple-example-hash-every-file>Simple example: hash every file</a></li><li><a href=#run-the-hash-in-parallel>Run the hash in parallel</a></li><li><a href=#other-use-cases>Other use cases</a></li><li><a href=#thoughts-about-design>Thoughts about design</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags><div class=tags><a class=tag-link href=/tags/performance>Performance</a>
-<a class=tag-link href=/tags/vql>VQL</a></div></div><div id=body-inner><h1>Concurrent VQL</h1><p><img src="../../img/0O-0AL55-9dX4uKDn?width=600px" alt></p><p>Velociraptor’s special source is really the Velociraptor Query Language (VQL). Using VQL allows administrators to query their endpoints and respond to new threats quickly and flexibly.</p><p>VQL was always intended to be a simple query language which users could pick up in a matter of hours, while being powerful at the same time. We never intended VQL to be a full blown programming language. Nevertheless, performance is a critical feature of VQL, simply because queries typically need to process large amount of data quickly. The challenge is how to expose powerful multithreaded programming concepts to VQL’s simple model of operation.</p><p>In this blog post we explore one of the new performance features that allow users to harness the full processing power of their platform.</p><h3 id=simple-example-hash-every-file>Simple example: hash every file</h3><p>Let’s consider a simple use case — hash every file on the system. I wrote a simple query to simply glob recursively through the filesystem, and for each file found calculate its hash.</p><p>To test this query I ran it in a notebook within the Velociraptor GUI.</p><p><img src=../../img/1lKdoOeFNUK3S0Jfoc5hjAg.png alt></p><p>This query is simple to understand, and fits the mental model of VQL: The glob() plugin searches the filesystem for files matching the glob expression (wildcards) and emits a single row per matched file. The query then processes each of these rows and passes the path to the hash() function which returns the hash.</p><p>When I ran the above query on my system, I kept an eye on my CPU activity monitor applet and I could see a single core spiking, but most of my other cores were idle (This is a 24 core machine).</p><p><img src=../../img/1AqHCS0ooUVU6uu_d1MbwQA.png alt></p><p>After a while, the query completes and I get the results (There were 4700 files hashed) and it took 46 second overall.</p><p><img src=../../img/1_x-w8bzPKcgDxIpemcuAvg.png alt></p><p>While this is satisfactory, I was a bit worried about my idle cores . This simple query was unable to fully utilize the processing capacity of my machine because the query was essentially sequential — each row was hashed in turn, before hashing the next row.</p><p>In this case, 46 seconds is not too bad, but if I wanted to hash the entire hard disk (as opposed to the <strong>/usr/bin</strong> directory) it could take a very long time.</p><h3 id=run-the-hash-in-parallel>Run the hash in parallel</h3><p>My query receives its file names from the glob() plugin which is very fast — clearly the performance blockage in my query is the <strong>hash</strong> function which is CPU intensive. I would therefore love to have a hash operation sent to each core in parallel, then all my cores will be recruited and the query will run faster.</p><p>Since Velociraptor 0.5.5, the foreach() plugin has an additional “workers” parameter. Readers who use Velociraptor extensively are familiar with the foreach() plugin, as it is probably the most common plugin in use. We also covered it in detail in an earlier blog post, <a href=https://medium.com/velociraptor-ir/the-velociraptor-query-language-pt-2-fe92bb7aa150>here</a>.</p><p>In a nutshell, the foreach() plugin takes 2 parameters. The “row” parameter is another query which will be run, taking each row produced by it. The “query” parameter is another query which will be evaluated with a nested scope containing the row obtained (Conceptually, the foreach plugin acts in a similar way to the SQL JOIN operator).</p><p>For example the above query can be refactored to</p><p><img src=../../img/1yQZMsoGUDzFNoHNBDvqXSg.png alt></p><p>The “row” query simply calls the glob() plugin and extracts the FullPath of each file matching the wildcards. The foreach() plugin will take that row and evaluate the query on the scope (therefore evaluating the hash() function).</p><p>This still does not buy us very much because each row is still processed in sequence one after the other.</p><p>In 0.5.5 the foreach() plugin has the “workers” parameter: This allows the plugin to create workers in a pool, and send them each row in parallel. While the “row” query is still evaluated sequentially, the “query” query will now be evaluated on a worker pool in a separate thread.</p><p><img src=../../img/1g18d_ZqooGZyGFtBVgTpFg.png alt></p><p>This time when I run the query, my CPU load applet lights up — all cores are busy!</p><p><img src=../../img/1WW4I3UqyHiQ5oisTojx5mw.png alt></p><p>The same query now takes 6 seconds instead of 46 seconds! A factor of 8 times faster.</p><p><img src=../../img/1UON1jBo_919hBi9LMn-QJw.png alt></p><p>This query was particularly suitable for parallelization because the CPU intensive operation was done on each row (hashing) but generating the rows themselves is very quick (globbing).</p><h3 id=other-use-cases>Other use cases</h3><p>In 0.5.5, Velociraptor’s offline collector now uses the above technique to upload multiple files simultaneously into the collection Zip file. Coupled with a multithreaded Zip writer implementation this allows parallel compression of many files at once — speeding up acquisition on most machines. The below screenshot shows the collector making good use of CPU resources during acquisition with a significant speed up.</p><p><img src=../../img/1t5DedninX180zBSrNIv1dA.png alt></p><h3 id=thoughts-about-design>Thoughts about design</h3><p>Many users when they first are introduced to VQL ask me about the “query optimizer/planner”. I guess this is because VQL is very similar to SQL in syntax. However, VQL does not have any query rewriting behind the scenes — with VQL what you write is what you get!</p><p>I feel that having some magic box rewrite your query behind your back is suboptimal — people have to constantly run “explain” to try to figure out what the optimizer/planner is going to do to their query and then try to rewrite their query in non-obvious ways to provide hints to the optimizer to get it to do what they actually wanted it to do. This adds complexity to the language and makes it more difficult to use.</p><p>In VQL, if you wanted more performance, you can do it by structuring your query — Velociraptor is not going to second guess what you wanted to do.</p><p>Additionally, extra performance may not always be what you want. If my goal was to hash the entire filesystem on an endpoint, I typically do not want the endpoint to use all its resources, because this may negatively impact the end user. For a machine with many cores, having a single core hash every file for a few hours is much less impactful or noticeable than all cores saturating, even for a short time.</p><p>For these reasons parallelism in VQL is opt in — users have to structure their query to take advantage of it. The language remains simple and easy to use with a predictable model for how it works.</p><p>To play with this feature yourself, take<a href=https://github.com/Velocidex/velociraptor> Velociraptor for a spin</a>! It is a available on GitHub under an open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><p>If you want to know more about Velociraptor, VQL and how to use it effectively to hunt across the enterprise, consider enrolling for the next available training course at <a href=https://www.velocidex.com/training/>https://www.velocidex.com/training/</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<a class=tag-link href=/tags/vql>VQL</a></div></div><div id=body-inner><h1>Concurrent VQL</h1><p><img src="../../img/0O-0AL55-9dX4uKDn?width=600px" alt></p><p>Velociraptor’s special source is really the Velociraptor Query Language (VQL). Using VQL allows administrators to query their endpoints and respond to new threats quickly and flexibly.</p><p>VQL was always intended to be a simple query language which users could pick up in a matter of hours, while being powerful at the same time. We never intended VQL to be a full blown programming language. Nevertheless, performance is a critical feature of VQL, simply because queries typically need to process large amount of data quickly. The challenge is how to expose powerful multithreaded programming concepts to VQL’s simple model of operation.</p><p>In this blog post we explore one of the new performance features that allow users to harness the full processing power of their platform.</p><h3 id=simple-example-hash-every-file>Simple example: hash every file</h3><p>Let’s consider a simple use case — hash every file on the system. I wrote a simple query to simply glob recursively through the filesystem, and for each file found calculate its hash.</p><p>To test this query I ran it in a notebook within the Velociraptor GUI.</p><p><img src=../../img/1lKdoOeFNUK3S0Jfoc5hjAg.png alt></p><p>This query is simple to understand, and fits the mental model of VQL: The glob() plugin searches the filesystem for files matching the glob expression (wildcards) and emits a single row per matched file. The query then processes each of these rows and passes the path to the hash() function which returns the hash.</p><p>When I ran the above query on my system, I kept an eye on my CPU activity monitor applet and I could see a single core spiking, but most of my other cores were idle (This is a 24 core machine).</p><p><img src=../../img/1AqHCS0ooUVU6uu_d1MbwQA.png alt></p><p>After a while, the query completes and I get the results (There were 4700 files hashed) and it took 46 second overall.</p><p><img src=../../img/1_x-w8bzPKcgDxIpemcuAvg.png alt></p><p>While this is satisfactory, I was a bit worried about my idle cores . This simple query was unable to fully utilize the processing capacity of my machine because the query was essentially sequential — each row was hashed in turn, before hashing the next row.</p><p>In this case, 46 seconds is not too bad, but if I wanted to hash the entire hard disk (as opposed to the <strong>/usr/bin</strong> directory) it could take a very long time.</p><h3 id=run-the-hash-in-parallel>Run the hash in parallel</h3><p>My query receives its file names from the glob() plugin which is very fast — clearly the performance blockage in my query is the <strong>hash</strong> function which is CPU intensive. I would therefore love to have a hash operation sent to each core in parallel, then all my cores will be recruited and the query will run faster.</p><p>Since Velociraptor 0.5.5, the foreach() plugin has an additional “workers” parameter. Readers who use Velociraptor extensively are familiar with the foreach() plugin, as it is probably the most common plugin in use. We also covered it in detail in an earlier blog post, <a href=https://medium.com/velociraptor-ir/the-velociraptor-query-language-pt-2-fe92bb7aa150>here</a>.</p><p>In a nutshell, the foreach() plugin takes 2 parameters. The “row” parameter is another query which will be run, taking each row produced by it. The “query” parameter is another query which will be evaluated with a nested scope containing the row obtained (Conceptually, the foreach plugin acts in a similar way to the SQL JOIN operator).</p><p>For example the above query can be refactored to</p><p><img src=../../img/1yQZMsoGUDzFNoHNBDvqXSg.png alt></p><p>The “row” query simply calls the glob() plugin and extracts the FullPath of each file matching the wildcards. The foreach() plugin will take that row and evaluate the query on the scope (therefore evaluating the hash() function).</p><p>This still does not buy us very much because each row is still processed in sequence one after the other.</p><p>In 0.5.5 the foreach() plugin has the “workers” parameter: This allows the plugin to create workers in a pool, and send them each row in parallel. While the “row” query is still evaluated sequentially, the “query” query will now be evaluated on a worker pool in a separate thread.</p><p><img src=../../img/1g18d_ZqooGZyGFtBVgTpFg.png alt></p><p>This time when I run the query, my CPU load applet lights up — all cores are busy!</p><p><img src=../../img/1WW4I3UqyHiQ5oisTojx5mw.png alt></p><p>The same query now takes 6 seconds instead of 46 seconds! A factor of 8 times faster.</p><p><img src=../../img/1UON1jBo_919hBi9LMn-QJw.png alt></p><p>This query was particularly suitable for parallelization because the CPU intensive operation was done on each row (hashing) but generating the rows themselves is very quick (globbing).</p><h3 id=other-use-cases>Other use cases</h3><p>In 0.5.5, Velociraptor’s offline collector now uses the above technique to upload multiple files simultaneously into the collection Zip file. Coupled with a multithreaded Zip writer implementation this allows parallel compression of many files at once — speeding up acquisition on most machines. The below screenshot shows the collector making good use of CPU resources during acquisition with a significant speed up.</p><p><img src=../../img/1t5DedninX180zBSrNIv1dA.png alt></p><h3 id=thoughts-about-design>Thoughts about design</h3><p>Many users when they first are introduced to VQL ask me about the “query optimizer/planner”. I guess this is because VQL is very similar to SQL in syntax. However, VQL does not have any query rewriting behind the scenes — with VQL what you write is what you get!</p><p>I feel that having some magic box rewrite your query behind your back is suboptimal — people have to constantly run “explain” to try to figure out what the optimizer/planner is going to do to their query and then try to rewrite their query in non-obvious ways to provide hints to the optimizer to get it to do what they actually wanted it to do. This adds complexity to the language and makes it more difficult to use.</p><p>In VQL, if you wanted more performance, you can do it by structuring your query — Velociraptor is not going to second guess what you wanted to do.</p><p>Additionally, extra performance may not always be what you want. If my goal was to hash the entire filesystem on an endpoint, I typically do not want the endpoint to use all its resources, because this may negatively impact the end user. For a machine with many cores, having a single core hash every file for a few hours is much less impactful or noticeable than all cores saturating, even for a short time.</p><p>For these reasons parallelism in VQL is opt in — users have to structure their query to take advantage of it. The language remains simple and easy to use with a predictable model for how it works.</p><p>To play with this feature yourself, take<a href=https://github.com/Velocidex/velociraptor> Velociraptor for a spin</a>! It is a available on GitHub under an open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><p>If you want to know more about Velociraptor, VQL and how to use it effectively to hunt across the enterprise, consider enrolling for the next available training course at <a href=https://www.velocidex.com/training/>https://www.velocidex.com/training/</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-01-29-disabled-event-log-files-a3529a08adbe/index.html b/blog/2021/2021-01-29-disabled-event-log-files-a3529a08adbe/index.html
index 326d76a0b10..6149a9ada3b 100644
--- a/blog/2021/2021-01-29-disabled-event-log-files-a3529a08adbe/index.html
+++ b/blog/2021/2021-01-29-disabled-event-log-files-a3529a08adbe/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Windows information security techniques are heavily reliant on the availability and integrity of event logs. Many state of the art systems use event log forwarding to aggregate information from endpoints and detect malicious behavior across the enterprise. Did you know that logs can be trivially disabled? Learn how Velociraptor can help..."><link rel=icon href=/images/favicon.png type=image/png><title>Disabled Event Log files :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-01-29-disabled-event-log-files-a3529a08adbe/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-01-29-disabled-event-log-files-a3529a08adbe/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -81,4 +81,4 @@
 $log = New-Object System.Diagnostics.Eventing.Reader.EventLogConfiguration $logName
 $log.IsEnabled=$true
 $log.SaveChanges()
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-02-02-detecting-dll-hijacking-with-vql-e9a735354257/index.html b/blog/2021/2021-02-02-detecting-dll-hijacking-with-vql-e9a735354257/index.html
index 90a0b2eb578..471677f8b9d 100644
--- a/blog/2021/2021-02-02-detecting-dll-hijacking-with-vql-e9a735354257/index.html
+++ b/blog/2021/2021-02-02-detecting-dll-hijacking-with-vql-e9a735354257/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Let's develop some VQL to detect common DLL hijacking on Windows.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Detecting DLL Hijacking With VQL :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-02-02-detecting-dll-hijacking-with-vql-e9a735354257/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-02-02-detecting-dll-hijacking-with-vql-e9a735354257/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Detecting DLL Hijacking With VQL</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><ul><li><a href=#example-injection>Example Injection</a></li><li><a href=#parsing-the-dll>Parsing the DLL</a></li><li><a href=#testing-the-vql>Testing the VQL</a></li><li><a href=#conclusions>Conclusions.</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags><div class=tags><a class=tag-link href=/tags/windows>Windows</a>
-<a class=tag-link href=/tags/vql>VQL</a></div></div><div id=body-inner><h1>Detecting DLL Hijacking With VQL</h1><p>One of my favorite pastime is reading Twitter and following other security researchers. I love being able to see a new tool or technique and develop an understanding and detections for it. A while back, I was reading my feed and saw an excellent article titled <a href=https://www.mdsec.co.uk/2020/10/i-live-to-move-it-windows-lateral-movement-part-3-dll-hijacking/>I Like to Move It: Windows Lateral Movement Part 3: DLL Hijacking</a>.</p><p>The article describes an interesting form of lateral movement — DLL Hijacking. DLL Hijacking is an abuse of the Windows DLL search order resolution process. Typically, when an executable is started, the executable will declare dependent DLLs in its import table. Windows will search for these DLLs in a number of paths, until a suitable DLL is found, and its exported symbols will be resolved into the new image. DLL Hijacking works by placing a malicious DLL, with the same name as a legitimate DLL, in a directory that is searched earlier, thereby tricking the loader into loading the malicious DLL instead of the legitimate one.</p><p>DLL Hijacking is often used for persistence — simply place a malicious DLL earlier in the search path, and programs that are started (potentially with higher privileges) will load the malicious DLL, thereby granting execution.</p><p>In the above article an interesting approach is described to escalate privileges or laterally move to a remote system — simply write a malicious DLL using e.g. SMB on the target machine, and wait until a user or process on the remote machine runs the vulnerable program.</p><p>Actually getting DLL hijacking to work successfully is <a href=https://silentbreaksecurity.com/adaptive-dll-hijacking/>quite tricky</a>. The details are described well by Nick Landers in <a href=https://silentbreaksecurity.com/adaptive-dll-hijacking/>Adaptive DLL Hijacking</a> which presents a number of approaches.</p><p>One of the simplest technique, is to simply create a DLL with a bunch of forwarded functions. Normally a DLL contains an <em>Export Table</em>, listing all the functions it exports. However sometimes, the need arises to legitimately forward an export that would normally be found in one DLL to another DLL (e.g. in the case where a DLL was refactored this allows replacing the dll without rebuilding programs that depend on it).</p><p>In this case, the export table contains a forward entry — i.e. it forwards the loader into another DLL. Nick Landers published a tool to help build such a dll <a href=https://github.com/monoxgas/Koppeling>https://github.com/monoxgas/Koppeling</a></p><h3 id=example-injection>Example Injection</h3><p>I will use the Koppeling tool above to build a simple DLL forwarder as per the example in the repository.</p><p><img src=../../img/1MDCiispLQZwNTqreGTQ_CQ.png alt></p><p><img src=../../img/1w0xeBExcn4m06ja_HLFGIg.png alt></p><h3 id=parsing-the-dll>Parsing the DLL</h3><p>Velociraptor has a function that allows parsing a PE file, lets see what information is available — Simply use parse_pe() on the injection file.</p><p><img src=../../img/1jogu19VYVVVeL98TDKZHNQ.png alt></p><p>We see that although the file is called <strong>wkscli.dll</strong> it really is <strong>kernel32.dll</strong> (since we have modified its exports to forward to the original wkscli.dll residing in C:\Windows\System32).</p><p>While it is normal for a dll to forward to another dll, it is very unusual for a dll to forward to <strong>another dll of the same name</strong>. So I think a strong signal for a potentially hijack dll is one that contains forwards to another dll with the same base name.</p><p>As usual I created a Velociraptor notebook and developed the VQL within it. The full query I entered in the notebook cell is shown below:</p><script src=https://gist.github.com/scudette/9a4aff9186028243e7b65da89ef538ad.js></script><ol><li><p>First I search for all DLL files in the provided glob (excluding <strong>winsxs</strong> and <strong>servicing</strong> directory). I also lowercase the name of the dll and strip the extension.</p></li><li><p>For each DLL I parse out the forwarded functions and use a regular expression to split the string into a target DLL and an exported function.</p></li><li><p>I then filter all rows to show only those with the target DLL the same as the name of the dll itself.</p></li></ol><h3 id=testing-the-vql>Testing the VQL</h3><p>I copied the hijack DLL I created with <a href=https://github.com/monoxgas/Koppeling>Koppeling</a> into the Windows directory. I then created an artifact and collected it on my VM. I chose to recursively scan all dlls in the windows directory to get an idea of the performance impact.</p><p><img src=../../img/1Fcsrla6Y1rQFyBThJ-APsg.png alt></p><p>Velociraptor reports all forwarded functions that target a DLL with the same name as the one it is currently parsing. Velociraptor parsed about 9000 Dlls and took 62 seconds to find the one injection dll and one false positive (C:\Windows\SysWOW64\rpcrt4.dll).</p><h3 id=conclusions>Conclusions.</h3><p>This quick VQL is only suitable to detect one type of DLL hijack — one using forwarded functions. There are many other types of hijacking which might be more difficult to detect (more are discussed in the paper above). It is also possible to detect dll injection after the fact (by looking at loaded DLLs in process memory images), but this query is looking for “time bombs” — simply files that stay on the endpoint until a time in the future where they allow reinfection or escalation.</p><p>In this exercise we went from a blog post and a POC tool to a detection artifact in a short time, and were able to easily deploy and subsequently hunt for these.</p><p>The above example is just one of the exercises we do in our hands on Velociraptor courses. If you are interested in learning more about Velociraptor, check out our hands on training courses on <a href=https://www.velocidex.com/training/>https://www.velocidex.com/training/</a> or check out the code on <a href=https://github.com/Velocidex/velociraptor>GitHub</a>. To chat, please join us on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<a class=tag-link href=/tags/vql>VQL</a></div></div><div id=body-inner><h1>Detecting DLL Hijacking With VQL</h1><p>One of my favorite pastime is reading Twitter and following other security researchers. I love being able to see a new tool or technique and develop an understanding and detections for it. A while back, I was reading my feed and saw an excellent article titled <a href=https://www.mdsec.co.uk/2020/10/i-live-to-move-it-windows-lateral-movement-part-3-dll-hijacking/>I Like to Move It: Windows Lateral Movement Part 3: DLL Hijacking</a>.</p><p>The article describes an interesting form of lateral movement — DLL Hijacking. DLL Hijacking is an abuse of the Windows DLL search order resolution process. Typically, when an executable is started, the executable will declare dependent DLLs in its import table. Windows will search for these DLLs in a number of paths, until a suitable DLL is found, and its exported symbols will be resolved into the new image. DLL Hijacking works by placing a malicious DLL, with the same name as a legitimate DLL, in a directory that is searched earlier, thereby tricking the loader into loading the malicious DLL instead of the legitimate one.</p><p>DLL Hijacking is often used for persistence — simply place a malicious DLL earlier in the search path, and programs that are started (potentially with higher privileges) will load the malicious DLL, thereby granting execution.</p><p>In the above article an interesting approach is described to escalate privileges or laterally move to a remote system — simply write a malicious DLL using e.g. SMB on the target machine, and wait until a user or process on the remote machine runs the vulnerable program.</p><p>Actually getting DLL hijacking to work successfully is <a href=https://silentbreaksecurity.com/adaptive-dll-hijacking/>quite tricky</a>. The details are described well by Nick Landers in <a href=https://silentbreaksecurity.com/adaptive-dll-hijacking/>Adaptive DLL Hijacking</a> which presents a number of approaches.</p><p>One of the simplest technique, is to simply create a DLL with a bunch of forwarded functions. Normally a DLL contains an <em>Export Table</em>, listing all the functions it exports. However sometimes, the need arises to legitimately forward an export that would normally be found in one DLL to another DLL (e.g. in the case where a DLL was refactored this allows replacing the dll without rebuilding programs that depend on it).</p><p>In this case, the export table contains a forward entry — i.e. it forwards the loader into another DLL. Nick Landers published a tool to help build such a dll <a href=https://github.com/monoxgas/Koppeling>https://github.com/monoxgas/Koppeling</a></p><h3 id=example-injection>Example Injection</h3><p>I will use the Koppeling tool above to build a simple DLL forwarder as per the example in the repository.</p><p><img src=../../img/1MDCiispLQZwNTqreGTQ_CQ.png alt></p><p><img src=../../img/1w0xeBExcn4m06ja_HLFGIg.png alt></p><h3 id=parsing-the-dll>Parsing the DLL</h3><p>Velociraptor has a function that allows parsing a PE file, lets see what information is available — Simply use parse_pe() on the injection file.</p><p><img src=../../img/1jogu19VYVVVeL98TDKZHNQ.png alt></p><p>We see that although the file is called <strong>wkscli.dll</strong> it really is <strong>kernel32.dll</strong> (since we have modified its exports to forward to the original wkscli.dll residing in C:\Windows\System32).</p><p>While it is normal for a dll to forward to another dll, it is very unusual for a dll to forward to <strong>another dll of the same name</strong>. So I think a strong signal for a potentially hijack dll is one that contains forwards to another dll with the same base name.</p><p>As usual I created a Velociraptor notebook and developed the VQL within it. The full query I entered in the notebook cell is shown below:</p><script src=https://gist.github.com/scudette/9a4aff9186028243e7b65da89ef538ad.js></script><ol><li><p>First I search for all DLL files in the provided glob (excluding <strong>winsxs</strong> and <strong>servicing</strong> directory). I also lowercase the name of the dll and strip the extension.</p></li><li><p>For each DLL I parse out the forwarded functions and use a regular expression to split the string into a target DLL and an exported function.</p></li><li><p>I then filter all rows to show only those with the target DLL the same as the name of the dll itself.</p></li></ol><h3 id=testing-the-vql>Testing the VQL</h3><p>I copied the hijack DLL I created with <a href=https://github.com/monoxgas/Koppeling>Koppeling</a> into the Windows directory. I then created an artifact and collected it on my VM. I chose to recursively scan all dlls in the windows directory to get an idea of the performance impact.</p><p><img src=../../img/1Fcsrla6Y1rQFyBThJ-APsg.png alt></p><p>Velociraptor reports all forwarded functions that target a DLL with the same name as the one it is currently parsing. Velociraptor parsed about 9000 Dlls and took 62 seconds to find the one injection dll and one false positive (C:\Windows\SysWOW64\rpcrt4.dll).</p><h3 id=conclusions>Conclusions.</h3><p>This quick VQL is only suitable to detect one type of DLL hijack — one using forwarded functions. There are many other types of hijacking which might be more difficult to detect (more are discussed in the paper above). It is also possible to detect dll injection after the fact (by looking at loaded DLLs in process memory images), but this query is looking for “time bombs” — simply files that stay on the endpoint until a time in the future where they allow reinfection or escalation.</p><p>In this exercise we went from a blog post and a POC tool to a detection artifact in a short time, and were able to easily deploy and subsequently hunt for these.</p><p>The above example is just one of the exercises we do in our hands on Velociraptor courses. If you are interested in learning more about Velociraptor, check out our hands on training courses on <a href=https://www.velocidex.com/training/>https://www.velocidex.com/training/</a> or check out the code on <a href=https://github.com/Velocidex/velociraptor>GitHub</a>. To chat, please join us on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-02-03-migrating-from-osquery-to-velociraptor-d4143799953f/index.html b/blog/2021/2021-02-03-migrating-from-osquery-to-velociraptor-d4143799953f/index.html
index 283c8ca2c22..09e7a948d65 100644
--- a/blog/2021/2021-02-03-migrating-from-osquery-to-velociraptor-d4143799953f/index.html
+++ b/blog/2021/2021-02-03-migrating-from-osquery-to-velociraptor-d4143799953f/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Many new Velociraptor users have existing OSQuery queries and installations and are migrating to Velociraptor for powerful and efficient endpoint visibility. This post summarizes some of the differences between Velociraptor and OSQuery."><link rel=icon href=/images/favicon.png type=image/png><title>Migrating from OSQuery to Velociraptor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-02-03-migrating-from-osquery-to-velociraptor-d4143799953f/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-02-03-migrating-from-osquery-to-velociraptor-d4143799953f/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -74,4 +74,4 @@
 </code></pre><p>The VQL equivalent to the file table is the glob() plugin, which accepts a glob expression (i.e. wildcards) to search the filesystem directly. (Note also that VQL does not use a semicolon “;” as a statement separator — it is not needed, just string multiple statements together).</p><p>So far both queries simply return a single row for a specific file. OSQuery allows us to specify a wildcard for filenames as well, however it uses the SQL <strong>like</strong> syntax. For example to return all dlls in the system32 directory:</p><pre><code class=language-sql>SELECT * FROM file WHERE path like “C:\Windows\system32\%.dll”;
 </code></pre><p>The equivalent VQL is</p><pre><code class=language-sql>SELECT * FROM glob(globs=”C:\\Windows\\System32\\*.dll”)
 </code></pre><p>You can test the VQL in the Velociraptor notebook right in the GUI. Simply select <strong>Notebooks</strong> from the sidebar and add a new notebook. Click on the top cell and add a new VQL cell where you can write arbitrary queries.</p><p><img src=../../img/1604zaUCaHumz_aHKaJY1Ig.png alt></p><p>You can also test OSQuery in the notebook cell by simply invoking the <code>Windows.OSQuery.Generic()</code> artifact (In this case Velociraptor will shell out to OSQuery and collect the results).</p><p><img src=../../img/1A6SW9z2b5anC7GHHZ2-Aeg.png alt></p><p>If you tried this you would immediately see a difference in performance — the VQL example took less than a second to return 3384 rows while OSQuery took over 6 sec to return the same data. While 6 seconds is not too bad, this gets worse when we try to fetch more dlls from the disk…</p><p>In VQL we can use <code>**</code> to denote recursive glob wildcard. This time the query took 2 seconds and returned 4090 rows.</p><p><img src=../../img/1Z2JdROd6jSvmSvxEB9p0QA.png alt></p><p>OSQuery uses %% for the same purpose. However OSQuery only allows a recursive wildcard at the end of a LIKE string (see discussion <a href=https://blog.kolide.com/the-file-table-in-osquery-is-amazing-99db0f52a066>here</a>), so we need to break up the condition into a more complex query with two conditions.</p><p><img src=../../img/1Jxcocb4GG8gnCEBugzMDjA.png alt></p><p>This time OSQuery takes 52 seconds to return the same number of rows. If you keep an eye on the task manager you would also see an increasing memory footprint for OSQuery because it queues up all rows in memory before returning them, so the more rows it returns the more memory it uses. If we now increase the size of the glob, to return all dlls on the system the query times out without returning any data at all!</p><p><img src=../../img/1eAv9VFpn-r_C6D8sGUVhhg.png alt></p><p>The timeout is imposed by Velociraptor’s OSQuery integration. This is another interesting difference between OSQuery and VQL — VQL has active query cancellation, and a timeout after which the query is cancelled (In this case the VQL that shells out to OSQuery has timed out and actively killed the OSQuery process after 10 minutes).</p><p>This makes running larger queries much safer as it provides an upper bound on the amount of resources taken on the endpoint. Once this bound is exceeded, the query is terminated.</p><p>Running a similar query with Velociraptor is much faster returning 64k rows in 66 seconds.</p><p><img src=../../img/1tQ3vq6-J7tVF_e0cloOWIg.png alt></p><p>Performance issues in the OSQuery file table have been discussed previously (see <a href=https://blog.kolide.com/the-file-table-in-osquery-is-amazing-99db0f52a066>https://blog.kolide.com/the-file-table-in-osquery-is-amazing-99db0f52a066</a>) and the advice is to just be more targeted in your queries, however if you need to know if a file exists anywhere on the disk then an exhaustive search is necessary.</p><p>Although being targeted is helpful, With VQL we can confidently run the exhaustive search because VQL has our back, in case our queries are more expensive than expected. VQL is designed to deal with many rows (e.g. the <code>Windows.NTFS.MFT</code> Artifact can return the entire contents of the MFT which can be around 400–500k rows within a couple minutes). VQL queries stream their results as soon as possible, so Velociraptor can maintain a low memory footprint even for very large result sets (typical memory footprint is 50–100mb).</p><p><strong>NOTE</strong>: VQL does not use the <strong>like</strong> keyword as in SQL. Instead VQL has the <strong>=~</strong> operator which means a regular expression match. SQL’s <strong>like</strong> syntax is archaic and much less powerful than a simple regular expression.</p><p>The following selects all user details for usernames matching “user” followed by a digit.</p><pre><code class=language-sql>SELECT * FROM Artifact.Windows.Sys.Users() WHERE Name =~ “user[0–9]”
-</code></pre><h3 id=queries-and-artifacts>Queries and Artifacts</h3><p>One major difference between OSQuery and Velociraptor is that Velociraptor does not usually directly run queries on endpoints. Instead, a VQL query is wrapped in an “Artifact” — a specially formatted YAML file which is stored within the Velociraptor server. Artifacts make queries discoverable and allow for queries to be shared with the community. Once an artifact is written, the user does not need to worry about remembering or entering a query.</p><p>Artifacts can also be directly used within another VQL query. This allows VQL to encapsulate a complex algorithm, but at the same time, users can easily build on top of this.</p><p>In contrast OSQuery uses hard coded internal tables to provide a lot of functionality requiring c++ coding to add a lot of simpler functionality to the tool.</p><p>Let’s consider the OSQuery <strong>chrome_extensions</strong> table — this table allows us to list all the chrome extensions installed by all users on the system. The query simply extract all rows but the actual logic of extracting and decoding the chrome extension data is hard coded inside OSQuery.</p><p><img src=../../img/1JV1XuRxZFwRJ0xNCS1k2UQ.png alt></p><p>On the other hand, Velociraptor’s <code>Windows.Applications.Chrome.Extensions</code> artifact is written in pure VQL (see <a href=https://github.com/Velocidex/velociraptor/blob/master/artifacts/definitions/Windows/Applications/Chrome/Extensions.yaml>the source code here</a>). You can view the artifact in the GUI by selecting the “View Artifact” screen from the sidebar. Note that artifacts can take parameters — in this case the artifact allows the user to adjust where the chrome extensions folder can be found.</p><p><img src=../../img/1NZA_Vj1kwrNF4hGx5Mrtaw.png alt></p><p>You can just call another artifact seamlessly from VQL as if it was just another plugin.</p><p><img src=../../img/14s-7aPELM12TKcRO4iK7Pg.png alt></p><p>This feature encourages users to develop reusable VQL Artifacts that can be put together like Lego bricks. Additionally, since artifacts are just VQL queries it is possible to add new capabilities to the tool with just a simple query — no need to write new tables in c++ like in OSQuery.</p><p>VQL provides very flexible primitives that can be much lower level than OSQuery. For example, a binary parser is provided built into the language, thereby allowing users to parse arbitrary files in their queries. The additional flexibility means that even complex functionality can be implemented entirely in VQL.</p><p>As a VQL query writer, seek to utilize one of the hundreds of built in artifacts in your queries. There are many artifacts that are functionally equivalent to OSQuery’s tables, but are written in VQL (So you can just customize them as well). If you come up with interesting artifacts, please share them with the community either by sending us a pull request on GitHub or hosting the YAML yourself.</p><h3 id=joins-and-foreach>Joins and foreach()</h3><p>Many newcomers to VQL look for the familiar SQL constructs like JOIN. However, VQL does not use joins at all, keeping the language simpler. In my experience SQL joins are confusing and difficult for people to really understand (quiz: what is the difference between a left join, right join, cross join, inner join and outer join?).</p><p>Since VQL can provide parameters to plugins, we can create a plugin which takes another query as a parameter. This is the fundamental idea behind the foreach() plugin (I wrote about it<a href=https://medium.com/velociraptor-ir/the-velociraptor-query-language-pt-2-fe92bb7aa150> previously</a>). The foreach plugin accepts the “rows” parameter and the “query” parameter. It simply runs the “rows” query and for each row it produces, the plugin evaluates the “query” query and emits the results.</p><p>Let’s take a simple example: an OSQuery query designed to display information about specific chrome extensions.</p><p><img src=../../img/12_aE3H4tGqcSQLw44l_iJQ.png alt></p><p>This OSQuery query joins the <strong>users</strong> table and the <strong>chrome_extension</strong> table to fill information about the user</p><p>The equivalent VQL simply runs two queries — for each row emitted by the <strong>Windows.Applications.Chrome.Extensions</strong> artifact that matches the extension of interest, we iterate over all the users, and select the user record of the user matching the relevant record so we can display its UUID.</p><p><img src=../../img/1uijQ0x2p97P13V66lkWFCQ.png alt></p><p>The VQL syntax is a lot of more readable without using a join statement. VQL also supports stored queries (similar to stored procedures) which take parameters and encourage query reuse.</p><p>A more refined query might use variables to store subqueries and then simply call them:</p><p><img src=../../img/1e_elJMJje0it3Da-M4OamQ.png alt></p><h3 id=conclusions>Conclusions</h3><p>This post described some of the more obvious differences between OSQuery and Velociraptor. To summarise</p><ol><li><p>The OSQuery file table equivalent is the VQL glob() plugin. Glob takes a glob expression as a parameter. Glob expressions use * and ** as wildcard instead of % or %%.</p></li><li><p>VQL does not have a like operator, instead using the regular expression operator =~</p></li><li><p>The Glob plugin is much faster than the OSQuery file table and there are no restrictions on where a recursive wildcard goes.</p></li><li><p>VQL queries time out by default after 10 min so there is no danger of overrunning the endpoint. If you prefer low and slow approach it is possible to rate limit the VQL query as well as increase the timeout.</p></li><li><p>Artifacts are YAML files that encapsulate VQL queries. Velociraptor does not directly collect VQL queries on the endpoint — you need to create an artifact first.</p></li><li><p>If you previously reached for an OSQuery table that provides the data you need, simply look at existing VQL Artifacts that do the same. If there are none available, you can add your own <strong>Artifacts</strong> in a modular way in the GUI (without needing to rebuild clients or servers).</p></li><li><p>VQL does not use <strong>join</strong>, instead the foreach plugin provides the same functionality in a clearer way. Foreach also takes the <strong>workers</strong> parameter allowing it to run concurrently on multiple cores.</p></li></ol><p>Users who are currently migrating from OSQuery can still reuse the existing investment they have in OSQuery queries directly in Velociraptor, but I hope this article convinced you that it is well worth porting your existing queries to native Velociraptor VQL to take advantage of the flexibility and performance enhancements that Velociraptor offers.</p><p>The above example is just one of the exercises we do in our hands on Velociraptor courses. If you are interested in learning more about Velociraptor, check out our hands on training courses on <a href=https://www.velocidex.com/training/>https://www.velocidex.com/training/</a> or check out the code on <a href=https://github.com/Velocidex/velociraptor>GitHub</a>. To chat, please join us on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><h3 id=queries-and-artifacts>Queries and Artifacts</h3><p>One major difference between OSQuery and Velociraptor is that Velociraptor does not usually directly run queries on endpoints. Instead, a VQL query is wrapped in an “Artifact” — a specially formatted YAML file which is stored within the Velociraptor server. Artifacts make queries discoverable and allow for queries to be shared with the community. Once an artifact is written, the user does not need to worry about remembering or entering a query.</p><p>Artifacts can also be directly used within another VQL query. This allows VQL to encapsulate a complex algorithm, but at the same time, users can easily build on top of this.</p><p>In contrast OSQuery uses hard coded internal tables to provide a lot of functionality requiring c++ coding to add a lot of simpler functionality to the tool.</p><p>Let’s consider the OSQuery <strong>chrome_extensions</strong> table — this table allows us to list all the chrome extensions installed by all users on the system. The query simply extract all rows but the actual logic of extracting and decoding the chrome extension data is hard coded inside OSQuery.</p><p><img src=../../img/1JV1XuRxZFwRJ0xNCS1k2UQ.png alt></p><p>On the other hand, Velociraptor’s <code>Windows.Applications.Chrome.Extensions</code> artifact is written in pure VQL (see <a href=https://github.com/Velocidex/velociraptor/blob/master/artifacts/definitions/Windows/Applications/Chrome/Extensions.yaml>the source code here</a>). You can view the artifact in the GUI by selecting the “View Artifact” screen from the sidebar. Note that artifacts can take parameters — in this case the artifact allows the user to adjust where the chrome extensions folder can be found.</p><p><img src=../../img/1NZA_Vj1kwrNF4hGx5Mrtaw.png alt></p><p>You can just call another artifact seamlessly from VQL as if it was just another plugin.</p><p><img src=../../img/14s-7aPELM12TKcRO4iK7Pg.png alt></p><p>This feature encourages users to develop reusable VQL Artifacts that can be put together like Lego bricks. Additionally, since artifacts are just VQL queries it is possible to add new capabilities to the tool with just a simple query — no need to write new tables in c++ like in OSQuery.</p><p>VQL provides very flexible primitives that can be much lower level than OSQuery. For example, a binary parser is provided built into the language, thereby allowing users to parse arbitrary files in their queries. The additional flexibility means that even complex functionality can be implemented entirely in VQL.</p><p>As a VQL query writer, seek to utilize one of the hundreds of built in artifacts in your queries. There are many artifacts that are functionally equivalent to OSQuery’s tables, but are written in VQL (So you can just customize them as well). If you come up with interesting artifacts, please share them with the community either by sending us a pull request on GitHub or hosting the YAML yourself.</p><h3 id=joins-and-foreach>Joins and foreach()</h3><p>Many newcomers to VQL look for the familiar SQL constructs like JOIN. However, VQL does not use joins at all, keeping the language simpler. In my experience SQL joins are confusing and difficult for people to really understand (quiz: what is the difference between a left join, right join, cross join, inner join and outer join?).</p><p>Since VQL can provide parameters to plugins, we can create a plugin which takes another query as a parameter. This is the fundamental idea behind the foreach() plugin (I wrote about it<a href=https://medium.com/velociraptor-ir/the-velociraptor-query-language-pt-2-fe92bb7aa150> previously</a>). The foreach plugin accepts the “rows” parameter and the “query” parameter. It simply runs the “rows” query and for each row it produces, the plugin evaluates the “query” query and emits the results.</p><p>Let’s take a simple example: an OSQuery query designed to display information about specific chrome extensions.</p><p><img src=../../img/12_aE3H4tGqcSQLw44l_iJQ.png alt></p><p>This OSQuery query joins the <strong>users</strong> table and the <strong>chrome_extension</strong> table to fill information about the user</p><p>The equivalent VQL simply runs two queries — for each row emitted by the <strong>Windows.Applications.Chrome.Extensions</strong> artifact that matches the extension of interest, we iterate over all the users, and select the user record of the user matching the relevant record so we can display its UUID.</p><p><img src=../../img/1uijQ0x2p97P13V66lkWFCQ.png alt></p><p>The VQL syntax is a lot of more readable without using a join statement. VQL also supports stored queries (similar to stored procedures) which take parameters and encourage query reuse.</p><p>A more refined query might use variables to store subqueries and then simply call them:</p><p><img src=../../img/1e_elJMJje0it3Da-M4OamQ.png alt></p><h3 id=conclusions>Conclusions</h3><p>This post described some of the more obvious differences between OSQuery and Velociraptor. To summarise</p><ol><li><p>The OSQuery file table equivalent is the VQL glob() plugin. Glob takes a glob expression as a parameter. Glob expressions use * and ** as wildcard instead of % or %%.</p></li><li><p>VQL does not have a like operator, instead using the regular expression operator =~</p></li><li><p>The Glob plugin is much faster than the OSQuery file table and there are no restrictions on where a recursive wildcard goes.</p></li><li><p>VQL queries time out by default after 10 min so there is no danger of overrunning the endpoint. If you prefer low and slow approach it is possible to rate limit the VQL query as well as increase the timeout.</p></li><li><p>Artifacts are YAML files that encapsulate VQL queries. Velociraptor does not directly collect VQL queries on the endpoint — you need to create an artifact first.</p></li><li><p>If you previously reached for an OSQuery table that provides the data you need, simply look at existing VQL Artifacts that do the same. If there are none available, you can add your own <strong>Artifacts</strong> in a modular way in the GUI (without needing to rebuild clients or servers).</p></li><li><p>VQL does not use <strong>join</strong>, instead the foreach plugin provides the same functionality in a clearer way. Foreach also takes the <strong>workers</strong> parameter allowing it to run concurrently on multiple cores.</p></li></ol><p>Users who are currently migrating from OSQuery can still reuse the existing investment they have in OSQuery queries directly in Velociraptor, but I hope this article convinced you that it is well worth porting your existing queries to native Velociraptor VQL to take advantage of the flexibility and performance enhancements that Velociraptor offers.</p><p>The above example is just one of the exercises we do in our hands on Velociraptor courses. If you are interested in learning more about Velociraptor, check out our hands on training courses on <a href=https://www.velocidex.com/training/>https://www.velocidex.com/training/</a> or check out the code on <a href=https://github.com/Velocidex/velociraptor>GitHub</a>. To chat, please join us on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-02-13-digging-for-files-with-velociraptor-a1c0a21e242b/index.html b/blog/2021/2021-02-13-digging-for-files-with-velociraptor-a1c0a21e242b/index.html
index 258756f5e03..af0c6248980 100644
--- a/blog/2021/2021-02-13-digging-for-files-with-velociraptor-a1c0a21e242b/index.html
+++ b/blog/2021/2021-02-13-digging-for-files-with-velociraptor-a1c0a21e242b/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="The post covers a number of ways to find filesystem artifacts."><link rel=icon href=/images/favicon.png type=image/png><title>Digging for files with Velociraptor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-02-13-digging-for-files-with-velociraptor-a1c0a21e242b/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-02-13-digging-for-files-with-velociraptor-a1c0a21e242b/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -72,4 +72,4 @@
 <span class=links>Digging for files with Velociraptor</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><ul><li><a href=#searching-for-files-using-windowssearchfilefinder>Searching for files using Windows.Search.FileFinder</a></li><li><a href=#scanning-the-master-file-table>Scanning the Master File Table</a></li><li><a href=#searching-the-usn-journal>Searching the USN journal</a></li><li><a href=#hunting-the-entire-network>Hunting the entire network</a></li><li><a href=#conclusions>Conclusions</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags><div class=tags><a class=tag-link href=/tags/forensics>Forensics</a>
 <a class=tag-link href=/tags/windows>Windows</a>
 <a class=tag-link href=/tags/filesystems>Filesystems</a></div></div><div id=body-inner><h1>Digging for files with Velociraptor</h1><p>One of the most common questions in digital forensics is:</p><pre><code class=language-text>Is a file with a specific filename currently present on this system or was it in the past?
-</code></pre><p>There are many scenarios that lead to this question, from theft of IP by rogue employees, to drive by downloads from malicious websites or even victims of phishing emails. Often we need to scope this question to the entire network (Which machines had this file?) or potentially 10s of thousands endpoints.</p><p>This post recounts some of the techniques we can use within Velociraptor to answer this question. Most of these techniques should be very familiar to DFIR practitioners, but we will discuss how they are implemented in Velociraptor specifically.</p><p>For this post I will create a text file with a unique name Abagnale.txt and I will attempt to find it on my test system.</p><p><img src=../../img/1u0_dhIcf9zdcRdO0x1rAdw.png alt></p><h3 id=searching-for-files-using-windowssearchfilefinder>Searching for files using Windows.Search.FileFinder</h3><p>The first artifact we can use to search for files is the aptly named FileFinder artifact (There are variants for Linux/MacOS and Windows). I will simply add a new collection, search for the file finder and select the <code>Windows.Search.FileFinder</code>.</p><p><img src=../../img/1YD4Zee8PdP8nw3b-mcFDeQ.png alt></p><p>Next I will configure the artifact parameters.</p><p><img src=../../img/13ebC-8_xkdROGTsmuCoreg.png alt></p><p>The FileFinder artifact uses a glob expression to find files through the filesystem. A glob expression uses simple wildcards to match files by filename. In Velociraptor a <code>**</code> glob expression means recursively descend into subdirectories, so in our case the glob expression <code>C:\**\Abagnale*</code> will enumerate all files in the C: drive to locate the file of interest.</p><p><img src=../../img/1xW9fQn8L_pKG5SgTvencrA.png alt></p><p>Globbing through all files took 109 seconds on my test VM and returned two hits (my original text file and a lnk file created by notepad itself):</p><p><img src=../../img/1Udz5uUX3NEzT4mY-757ajw.png alt></p><h3 id=scanning-the-master-file-table>Scanning the Master File Table</h3><p>On Windows, the NTFS filesystem is almost ubiquitous. NTFS uses a special hidden file called the $MFT to store all metadata on all files (such as their filenames, size, dates etc). Metadata is stored in the $MFT within MFT entries — fixed size data structures stored back to back in the $MFT file.</p><p>Therefore, by scanning the $MFT file and parsing all MFT entries, we are able to enumerate all files’ metadata on the disk.</p><p>Velociraptor offers an artifact called <code>Windows.NTFS.MFT</code> that will enumerate all entries within the $MFT filtering out only the relevant ones.</p><p><img src=../../img/1l-xgDXReDeWyKK_A7wAm9w.png alt></p><p>I will again proceed to configure the artifact parameters. This time I am able to filter the filename by a regular expression. I will just search for all files with filenames containing the word <strong>Abagnale</strong> .</p><p><img src=../../img/1zoTSgpXbFFktbI-b14k9fg.png alt></p><p>Again this artifact found the same 2 files as the previous one</p><p><img src=../../img/1EB6S8u1baKQ2h7Qv4bTpww.png alt></p><p>So how is the MFT search method different from the Glob method?</p><p>Parsing the MFT tends to be faster than using the APIs in a glob when searching over the entire disk (87 sec vs 109 sec), although if you know that the files can only be in a more confined part of the disk (e.g. inside the C:\Users directory) then the glob method is faster since it is looking at fewer files.</p><p>However, the MFT search may be able to detect deleted files. When a file is deleted in NTFS the MFT entry is marked as unallocated and can be reused at any time, but until it does, the old data structures are still present and will be parsed by the MFT parser.</p><p>Additionally the MFT parser has access to the <strong>$FILENAME</strong> stream’s timestamps and so can report those as well. Timestamps in the <strong>$FILENAME</strong> streams (Shown in the above results as Created0x30, LastModified0x30 etc) can not be altered by timestomping tools and so are more reliable indicators of when the file was created or modified.</p><h3 id=searching-the-usn-journal>Searching the USN journal</h3><p>While the previous two methods were great for detecting files that are currently present on the endpoint, what if the file was since deleted? I mentioned that the MFT parser may still find evidence of a deleted file in unallocated MFT entries, but this will only happen if the entry is not reused by the system for something else.</p><p>Luckily, Windows keeps another record of file operations in the NTFS USN journal. I wrote in details previously about <a href=https://medium.com/velociraptor-ir/the-windows-usn-journal-f0c55c9010e>the USN journal</a> but for our purposes it is sufficient to know that file operations are continuously written by the system into a journal file internal to the NTFS filesystem (so it is not generally altered by adversaries).</p><p>Velociraptor contains a built-in parser for the USN journal which is made available via the <code>Windows.Forensics.Usn</code> artifact. I will select this artifact for collection as before</p><p><img src=../../img/1-hox0Mi6qUTpbkIsrGjKMQ.png alt></p><p>I now select “Configure Parameters” where I can specify a path regular expression.</p><p><img src=../../img/1E4JaMVWTzWPB7ghefsKOZQ.png alt></p><p>This time the artifact returns 7 rows in 29 seconds</p><p><img src=../../img/1nvuwmAxUDjDOC1V2Abwopg.png alt></p><p>Let’s take a look at the rows returned from this query</p><p><img src=../../img/1qkHHGevfBzluJPeTcHBlSw.png alt></p><p>Since the USN journal stores metadata about file operations, we see each time the file was interacted with by a program. This is not exactly the same as the previous results which just show the final state of the file.</p><p>For example, if the file was edited at one point in time and then edited again at a later time, the USN journal will show 2 separate interactions with the file, but the previous artifacts will only show the last modified time. This can be significant for some investigations, in particular if the file is deleted.</p><p>Typically we find the USN journal is kept for around 2–3 weeks by the system, providing excellent visibility of past activities.</p><h3 id=hunting-the-entire-network>Hunting the entire network</h3><p>Previously we collected the artifacts on a single host. However, in some investigations we need to determine if any machine in our network contains the file in question.</p><p>Velociraptor hunts are specifically designed to coordinate collections of the same artifact across the entire fleet. I will create a new hunt and give it a description, then proceed to select the <code>Windows.Forensics.Usn</code> artifact configuring its parameters as before.</p><p><img src=../../img/1pV6gUITH1IO1rCM2ok28ug.png alt></p><p>Running the hunt over a small network returns results within minutes</p><p><img src=../../img/1ivnEtqt-UnZG2kUldMdScA.png alt></p><p>While it may seem that a USN journal scan of an entire network is an expensive operation, in reality it places very little load on the server.</p><p>The server simply collects the result sets from running the VQL query across each endpoint in the deployment. Since these artifacts are highly targeted in returning only positive hits for the files in question the total number of rows returned is pretty small. In this hunt, most of the heavy lifting is done by the endpoints themselves — this is the secret for Velociraptor’s scalability!</p><h3 id=conclusions>Conclusions</h3><p>In this post we looked at some of the common ways to determine if a file was present on a system. Each method has advantages and disadvantages and this article explored when you should use one method over another. You can of course, just use all methods at the same time, and interpret their results accordingly.</p><p>All the described methods are very quick ranging from under 30 seconds for a USN journal scan, to a couple of minutes for a large glob operation. Using Velociraptor we can perform an exhaustive search of a large 10–20k endpoint deployment in minutes. This unprecedented agility and scalability is rather unique in an open source DFIR tool.</p><p>To play with these artifacts yourself, take<a href=https://github.com/Velocidex/velociraptor> Velociraptor for a spin</a>! It is a available on GitHub under an open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><p>If you want to know more about Velociraptor, VQL and how to use it effectively to hunt across the enterprise, consider enrolling for the next available training course at <a href=https://www.velocidex.com/training/>https://www.velocidex.com/training/</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><p>There are many scenarios that lead to this question, from theft of IP by rogue employees, to drive by downloads from malicious websites or even victims of phishing emails. Often we need to scope this question to the entire network (Which machines had this file?) or potentially 10s of thousands endpoints.</p><p>This post recounts some of the techniques we can use within Velociraptor to answer this question. Most of these techniques should be very familiar to DFIR practitioners, but we will discuss how they are implemented in Velociraptor specifically.</p><p>For this post I will create a text file with a unique name Abagnale.txt and I will attempt to find it on my test system.</p><p><img src=../../img/1u0_dhIcf9zdcRdO0x1rAdw.png alt></p><h3 id=searching-for-files-using-windowssearchfilefinder>Searching for files using Windows.Search.FileFinder</h3><p>The first artifact we can use to search for files is the aptly named FileFinder artifact (There are variants for Linux/MacOS and Windows). I will simply add a new collection, search for the file finder and select the <code>Windows.Search.FileFinder</code>.</p><p><img src=../../img/1YD4Zee8PdP8nw3b-mcFDeQ.png alt></p><p>Next I will configure the artifact parameters.</p><p><img src=../../img/13ebC-8_xkdROGTsmuCoreg.png alt></p><p>The FileFinder artifact uses a glob expression to find files through the filesystem. A glob expression uses simple wildcards to match files by filename. In Velociraptor a <code>**</code> glob expression means recursively descend into subdirectories, so in our case the glob expression <code>C:\**\Abagnale*</code> will enumerate all files in the C: drive to locate the file of interest.</p><p><img src=../../img/1xW9fQn8L_pKG5SgTvencrA.png alt></p><p>Globbing through all files took 109 seconds on my test VM and returned two hits (my original text file and a lnk file created by notepad itself):</p><p><img src=../../img/1Udz5uUX3NEzT4mY-757ajw.png alt></p><h3 id=scanning-the-master-file-table>Scanning the Master File Table</h3><p>On Windows, the NTFS filesystem is almost ubiquitous. NTFS uses a special hidden file called the $MFT to store all metadata on all files (such as their filenames, size, dates etc). Metadata is stored in the $MFT within MFT entries — fixed size data structures stored back to back in the $MFT file.</p><p>Therefore, by scanning the $MFT file and parsing all MFT entries, we are able to enumerate all files’ metadata on the disk.</p><p>Velociraptor offers an artifact called <code>Windows.NTFS.MFT</code> that will enumerate all entries within the $MFT filtering out only the relevant ones.</p><p><img src=../../img/1l-xgDXReDeWyKK_A7wAm9w.png alt></p><p>I will again proceed to configure the artifact parameters. This time I am able to filter the filename by a regular expression. I will just search for all files with filenames containing the word <strong>Abagnale</strong> .</p><p><img src=../../img/1zoTSgpXbFFktbI-b14k9fg.png alt></p><p>Again this artifact found the same 2 files as the previous one</p><p><img src=../../img/1EB6S8u1baKQ2h7Qv4bTpww.png alt></p><p>So how is the MFT search method different from the Glob method?</p><p>Parsing the MFT tends to be faster than using the APIs in a glob when searching over the entire disk (87 sec vs 109 sec), although if you know that the files can only be in a more confined part of the disk (e.g. inside the C:\Users directory) then the glob method is faster since it is looking at fewer files.</p><p>However, the MFT search may be able to detect deleted files. When a file is deleted in NTFS the MFT entry is marked as unallocated and can be reused at any time, but until it does, the old data structures are still present and will be parsed by the MFT parser.</p><p>Additionally the MFT parser has access to the <strong>$FILENAME</strong> stream’s timestamps and so can report those as well. Timestamps in the <strong>$FILENAME</strong> streams (Shown in the above results as Created0x30, LastModified0x30 etc) can not be altered by timestomping tools and so are more reliable indicators of when the file was created or modified.</p><h3 id=searching-the-usn-journal>Searching the USN journal</h3><p>While the previous two methods were great for detecting files that are currently present on the endpoint, what if the file was since deleted? I mentioned that the MFT parser may still find evidence of a deleted file in unallocated MFT entries, but this will only happen if the entry is not reused by the system for something else.</p><p>Luckily, Windows keeps another record of file operations in the NTFS USN journal. I wrote in details previously about <a href=https://medium.com/velociraptor-ir/the-windows-usn-journal-f0c55c9010e>the USN journal</a> but for our purposes it is sufficient to know that file operations are continuously written by the system into a journal file internal to the NTFS filesystem (so it is not generally altered by adversaries).</p><p>Velociraptor contains a built-in parser for the USN journal which is made available via the <code>Windows.Forensics.Usn</code> artifact. I will select this artifact for collection as before</p><p><img src=../../img/1-hox0Mi6qUTpbkIsrGjKMQ.png alt></p><p>I now select “Configure Parameters” where I can specify a path regular expression.</p><p><img src=../../img/1E4JaMVWTzWPB7ghefsKOZQ.png alt></p><p>This time the artifact returns 7 rows in 29 seconds</p><p><img src=../../img/1nvuwmAxUDjDOC1V2Abwopg.png alt></p><p>Let’s take a look at the rows returned from this query</p><p><img src=../../img/1qkHHGevfBzluJPeTcHBlSw.png alt></p><p>Since the USN journal stores metadata about file operations, we see each time the file was interacted with by a program. This is not exactly the same as the previous results which just show the final state of the file.</p><p>For example, if the file was edited at one point in time and then edited again at a later time, the USN journal will show 2 separate interactions with the file, but the previous artifacts will only show the last modified time. This can be significant for some investigations, in particular if the file is deleted.</p><p>Typically we find the USN journal is kept for around 2–3 weeks by the system, providing excellent visibility of past activities.</p><h3 id=hunting-the-entire-network>Hunting the entire network</h3><p>Previously we collected the artifacts on a single host. However, in some investigations we need to determine if any machine in our network contains the file in question.</p><p>Velociraptor hunts are specifically designed to coordinate collections of the same artifact across the entire fleet. I will create a new hunt and give it a description, then proceed to select the <code>Windows.Forensics.Usn</code> artifact configuring its parameters as before.</p><p><img src=../../img/1pV6gUITH1IO1rCM2ok28ug.png alt></p><p>Running the hunt over a small network returns results within minutes</p><p><img src=../../img/1ivnEtqt-UnZG2kUldMdScA.png alt></p><p>While it may seem that a USN journal scan of an entire network is an expensive operation, in reality it places very little load on the server.</p><p>The server simply collects the result sets from running the VQL query across each endpoint in the deployment. Since these artifacts are highly targeted in returning only positive hits for the files in question the total number of rows returned is pretty small. In this hunt, most of the heavy lifting is done by the endpoints themselves — this is the secret for Velociraptor’s scalability!</p><h3 id=conclusions>Conclusions</h3><p>In this post we looked at some of the common ways to determine if a file was present on a system. Each method has advantages and disadvantages and this article explored when you should use one method over another. You can of course, just use all methods at the same time, and interpret their results accordingly.</p><p>All the described methods are very quick ranging from under 30 seconds for a USN journal scan, to a couple of minutes for a large glob operation. Using Velociraptor we can perform an exhaustive search of a large 10–20k endpoint deployment in minutes. This unprecedented agility and scalability is rather unique in an open source DFIR tool.</p><p>To play with these artifacts yourself, take<a href=https://github.com/Velocidex/velociraptor> Velociraptor for a spin</a>! It is a available on GitHub under an open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><p>If you want to know more about Velociraptor, VQL and how to use it effectively to hunt across the enterprise, consider enrolling for the next available training course at <a href=https://www.velocidex.com/training/>https://www.velocidex.com/training/</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-04-16-digging-into-process-memory-33c60a640cdb/index.html b/blog/2021/2021-04-16-digging-into-process-memory-33c60a640cdb/index.html
index 23901e3b2f1..7730207febe 100644
--- a/blog/2021/2021-04-16-digging-into-process-memory-33c60a640cdb/index.html
+++ b/blog/2021/2021-04-16-digging-into-process-memory-33c60a640cdb/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Unlike traditional dead disk forensic tools, Velociraptor’s main advantage is that it is capable of directly looking at volatile system state, such as running processes, open files and currently connected sockets. This class of forensic artifacts are called Volatile Artifacts since they change rapidly as the system operates. Learn how Velociraptor collects volatile system state."><link rel=icon href=/images/favicon.png type=image/png><title>Digging into process memory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-04-16-digging-into-process-memory-33c60a640cdb/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-04-16-digging-into-process-memory-33c60a640cdb/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Digging into process memory</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><ul><li><a href=#direct-access-to-process-memory>Direct access to process memory</a></li><li><a href=#determining-process-environment-variables>Determining process environment variables</a></li><li><a href=#detecting-etw-subversion>Detecting ETW subversion.</a></li><li><a href=#conclusions>Conclusions</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags><div class=tags><a class=tag-link href=/tags/forensics>Forensics</a>
 <a class=tag-link href=/tags/memory>Memory</a>
-<a class=tag-link href=/tags/windows>Windows</a></div></div><div id=body-inner><h1>Digging into process memory</h1><p>Unlike traditional dead disk forensic tools, Velociraptor’s main advantage is that it is capable of directly looking at volatile system state, such as running processes, open files and currently connected sockets. This class of forensic artifacts are called Volatile Artifacts since they change rapidly as the system operates — processes can start and stop quickly, files can be closed etc.</p><p>Traditionally, acquiring volatile artifacts meant taking a raw physical memory image, and then analyzing this with a memory analysis framework such as <a href=https://github.com/volatilityfoundation/volatility>Volatility</a> or <a href=https://github.com/google/rekall>Rekall</a>. These frameworks reassemble the contents of physical memory into higher level abstractions, like processes, threads, registry content etc.</p><p>While at first it might appear that a physical memory image contains a perfect snapshot of the running state of a system, this is not typically the case. The physical memory image only contains those pages currently locked into physical memory — however, modern operating systems use virtual memory to represent process and kernel memory address spaces. Each virtual memory address may refer to either paged out memory (i.e. only present in the page file) or memory mapped files (i.e. only present on the file system in e.g. dll or executable files), neither of which are typically included in a physical memory image.</p><p>Additionally, most physical memory images obtained in a DFIR setting, contains acquisition smear (i.e. the memory is changing during the acquisition process). This smear leads to inconsistencies, making memory analysis from physical memory samples generally a hit or miss affair.</p><p>For DFIR purposes it is preferable to extract data directly from the running system, rather than rely on fragile memory analysis. For example, to obtain a list of processes, it is always more reliable to use the system APIs than to take a full memory image, ship it off the endpoint, and then use a framework like Volatility to extract the same data from the raw image.</p><p>Many of the same techniques implemented in Volatility for physical memory analysis can also be implemented directly on the endpoint using OS APIs. Velociraptor already contains plugins such as “vad”, “pslist”, “modules”, “handles”, “objtree” etc.</p><p>Consider the identification of malicious processes running in memory. Many modern tools use memory only injection, where malicious code is added to processes but is never written to disk. Detecting this type of malware requires inspection of process memory using for example a Yara signature.</p><p>For example, <a href=https://malpedia.caad.fkie.fraunhofer.de/>Malpedia</a> contains Yara signatures for common malware families derived from automated identification of common code blocks. We can apply these signatures to detect memory injected <a href=https://malpedia.caad.fkie.fraunhofer.de/details/win.cobalt_strike>Cobalt Strike beacon</a> by simply scanning each process address space and reporting any hits.</p><p>Velociraptor included bindings to libyara’s process scanning capabilities for a while now, exposed through the VQL plugin proc_yara() and usable through artifacts such as <a href=https://github.com/Velocidex/velociraptor/blob/master/artifacts/definitions/Windows/Detection/ProcessMemory/CobaltStrike.yaml>Windows.Detection.ProcessMemory.CobaltStrike</a>.</p><h3 id=direct-access-to-process-memory>Direct access to process memory</h3><p>Since release 0.5.8, Velociraptor provides direct access to process memory via the “process” <a href=https://www.velocidex.com/docs/user-interface/investigating_clients/virtual_filesystem/#filesystem-accessors>accessor</a>. This allows any plugins and functions that normally operate on files to also operate on process memory, as if the process memory was just another file.</p><p>To demonstrate this new accessor, I will write “this is a test” in notepad without saving the file on disk (so the string exists only in memory). I will then write some VQL to detect this string in the process memory of notepad</p><p><img src=../../img/1jhU1ZpOf3ArKtHQsES5UpA.png alt></p><p>In the above example, I am iterating over all processes with a name matching “notepad” and then applying a yara signature over their process address space. The “process” accessor allows me to open the process represented by the filename “/<pid>” as if it was a file. The <code>yara()</code> plugin (which normally operates on files) will just see process memory as another file to scan.</p><p>I can then also extract some context around the hits to see if the hit is a false positive.</p><h3 id=determining-process-environment-variables>Determining process environment variables</h3><p>When a process is launched it receives environment variables that often affect the way the launched program behaves. I was curious to see if it is possible to determine the environment variables that a process is launched with?</p><p>On windows, each process is started with a <a href=https://docs.microsoft.com/en-us/windows/win32/api/winternl/ns-winternl-peb>Process Environment Block</a>. This data structure is populated by the OS before the process is created and contains important information about the process. Processes can extract this information at runtime. The process environment variables are stored in the PEB too and therefore we can parse these out from each process’s memory.</p><p>Velociraptor has a powerful binary parser built in, as was described previously in the post “<a href=https://velociraptor.velocidex.com/parsing-binary-files-d31114a41f14>Parsing binary files</a>”. Having the process memory exposed via an accessor allows us to apply this parser to process memory via a VQL query.</p><p>If you are interested in the details, check out the VQL for the <code>Windows.Forensics.ProcessInfo</code> artifact <a href=https://github.com/Velocidex/velociraptor/blob/master/artifacts/definitions/Windows/Forensics/ProcessInfo.yaml>here</a>, but here is the result of collecting the process information (including each process’s environment variables) from my system</p><p><img src=../../img/1uuWWzOGWgSnIg_4Or8JLrQ.png alt></p><h3 id=detecting-etw-subversion>Detecting ETW subversion.</h3><p>Recently I read Adam Chester’s <a href=https://blog.xpnsec.com/hiding-your-dotnet-complus-etwenabled/>blog post</a> where he described his finding that the .NET ETW provider can simply be disabled by setting the <code>COMPlus_ETWEnabled</code> environment variable to 0. This is dramatically demonstrated by using process hacker to inspect the .NET assemblies of a powershell process.</p><p><img src=../../img/1GCGVJTqyGR9Hc66F6cFiJg.png alt></p><p>When the <code>COMPlus_ETWEnabled</code> environment variable is set to “0”, process hacker will be unable to inspect the loaded assemblies, since it relies on ETW support to do so and this is disabled within the running powershell process.</p><p>While this anti-detection technique is very simple for attackers to implement — they simply set an environment variable before launching the target binary, it should be very easy for us to detect it, using the following heuristics:</p><ul><li>Iterate over all processes, and</li><li>if any process has an environment variable starting with “COMPlus_” then it is suspicious.</li></ul><p>Our VQL can take advantage of the existing <code>Windows.Forensics.ProcessInfo</code> artifact and simply inspect each process’s environment dictionary</p><p><img src=../../img/1QgWxuYVpwR0yVpqq8LnPkA.png alt></p><p>In the above query we extract each process and its environment dictionary from the <code>Windows.Forensics.ProcessInfo</code> artifact, then iterate over each key and value using the <em>items()</em> plugin, filtering any keys beginning with “COMPlus”.</p><p>To convert this VQL into a detection, we now encapsulate the query in an artifact and hunt all our endpoints for processes that have the environment variable set. In practice, there should not be any legitimate reason to switch off the .NET ETW provider, so if we see this variable set in the environment, it is a very strong signal and requires further investigation.</p><h3 id=conclusions>Conclusions</h3><p>This post introduced the “process” accessor, which exposes process memory to all VQL plugins that can usually access files. The process accessor allows us to implement memory analysis techniques on running processes in real time, safely, quickly and reliably, without needing to resort to acquiring and analysing full physical memory images. This provides unprecedented visibility into the state of the endpoint and forms the basis for novel detection and hunting possibilities.</p><p>To use this feature yourself, take<a href=https://github.com/Velocidex/velociraptor> Velociraptor for a spin</a>! It is a available on GitHub under an open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<a class=tag-link href=/tags/windows>Windows</a></div></div><div id=body-inner><h1>Digging into process memory</h1><p>Unlike traditional dead disk forensic tools, Velociraptor’s main advantage is that it is capable of directly looking at volatile system state, such as running processes, open files and currently connected sockets. This class of forensic artifacts are called Volatile Artifacts since they change rapidly as the system operates — processes can start and stop quickly, files can be closed etc.</p><p>Traditionally, acquiring volatile artifacts meant taking a raw physical memory image, and then analyzing this with a memory analysis framework such as <a href=https://github.com/volatilityfoundation/volatility>Volatility</a> or <a href=https://github.com/google/rekall>Rekall</a>. These frameworks reassemble the contents of physical memory into higher level abstractions, like processes, threads, registry content etc.</p><p>While at first it might appear that a physical memory image contains a perfect snapshot of the running state of a system, this is not typically the case. The physical memory image only contains those pages currently locked into physical memory — however, modern operating systems use virtual memory to represent process and kernel memory address spaces. Each virtual memory address may refer to either paged out memory (i.e. only present in the page file) or memory mapped files (i.e. only present on the file system in e.g. dll or executable files), neither of which are typically included in a physical memory image.</p><p>Additionally, most physical memory images obtained in a DFIR setting, contains acquisition smear (i.e. the memory is changing during the acquisition process). This smear leads to inconsistencies, making memory analysis from physical memory samples generally a hit or miss affair.</p><p>For DFIR purposes it is preferable to extract data directly from the running system, rather than rely on fragile memory analysis. For example, to obtain a list of processes, it is always more reliable to use the system APIs than to take a full memory image, ship it off the endpoint, and then use a framework like Volatility to extract the same data from the raw image.</p><p>Many of the same techniques implemented in Volatility for physical memory analysis can also be implemented directly on the endpoint using OS APIs. Velociraptor already contains plugins such as “vad”, “pslist”, “modules”, “handles”, “objtree” etc.</p><p>Consider the identification of malicious processes running in memory. Many modern tools use memory only injection, where malicious code is added to processes but is never written to disk. Detecting this type of malware requires inspection of process memory using for example a Yara signature.</p><p>For example, <a href=https://malpedia.caad.fkie.fraunhofer.de/>Malpedia</a> contains Yara signatures for common malware families derived from automated identification of common code blocks. We can apply these signatures to detect memory injected <a href=https://malpedia.caad.fkie.fraunhofer.de/details/win.cobalt_strike>Cobalt Strike beacon</a> by simply scanning each process address space and reporting any hits.</p><p>Velociraptor included bindings to libyara’s process scanning capabilities for a while now, exposed through the VQL plugin proc_yara() and usable through artifacts such as <a href=https://github.com/Velocidex/velociraptor/blob/master/artifacts/definitions/Windows/Detection/ProcessMemory/CobaltStrike.yaml>Windows.Detection.ProcessMemory.CobaltStrike</a>.</p><h3 id=direct-access-to-process-memory>Direct access to process memory</h3><p>Since release 0.5.8, Velociraptor provides direct access to process memory via the “process” <a href=https://www.velocidex.com/docs/user-interface/investigating_clients/virtual_filesystem/#filesystem-accessors>accessor</a>. This allows any plugins and functions that normally operate on files to also operate on process memory, as if the process memory was just another file.</p><p>To demonstrate this new accessor, I will write “this is a test” in notepad without saving the file on disk (so the string exists only in memory). I will then write some VQL to detect this string in the process memory of notepad</p><p><img src=../../img/1jhU1ZpOf3ArKtHQsES5UpA.png alt></p><p>In the above example, I am iterating over all processes with a name matching “notepad” and then applying a yara signature over their process address space. The “process” accessor allows me to open the process represented by the filename “/<pid>” as if it was a file. The <code>yara()</code> plugin (which normally operates on files) will just see process memory as another file to scan.</p><p>I can then also extract some context around the hits to see if the hit is a false positive.</p><h3 id=determining-process-environment-variables>Determining process environment variables</h3><p>When a process is launched it receives environment variables that often affect the way the launched program behaves. I was curious to see if it is possible to determine the environment variables that a process is launched with?</p><p>On windows, each process is started with a <a href=https://docs.microsoft.com/en-us/windows/win32/api/winternl/ns-winternl-peb>Process Environment Block</a>. This data structure is populated by the OS before the process is created and contains important information about the process. Processes can extract this information at runtime. The process environment variables are stored in the PEB too and therefore we can parse these out from each process’s memory.</p><p>Velociraptor has a powerful binary parser built in, as was described previously in the post “<a href=https://velociraptor.velocidex.com/parsing-binary-files-d31114a41f14>Parsing binary files</a>”. Having the process memory exposed via an accessor allows us to apply this parser to process memory via a VQL query.</p><p>If you are interested in the details, check out the VQL for the <code>Windows.Forensics.ProcessInfo</code> artifact <a href=https://github.com/Velocidex/velociraptor/blob/master/artifacts/definitions/Windows/Forensics/ProcessInfo.yaml>here</a>, but here is the result of collecting the process information (including each process’s environment variables) from my system</p><p><img src=../../img/1uuWWzOGWgSnIg_4Or8JLrQ.png alt></p><h3 id=detecting-etw-subversion>Detecting ETW subversion.</h3><p>Recently I read Adam Chester’s <a href=https://blog.xpnsec.com/hiding-your-dotnet-complus-etwenabled/>blog post</a> where he described his finding that the .NET ETW provider can simply be disabled by setting the <code>COMPlus_ETWEnabled</code> environment variable to 0. This is dramatically demonstrated by using process hacker to inspect the .NET assemblies of a powershell process.</p><p><img src=../../img/1GCGVJTqyGR9Hc66F6cFiJg.png alt></p><p>When the <code>COMPlus_ETWEnabled</code> environment variable is set to “0”, process hacker will be unable to inspect the loaded assemblies, since it relies on ETW support to do so and this is disabled within the running powershell process.</p><p>While this anti-detection technique is very simple for attackers to implement — they simply set an environment variable before launching the target binary, it should be very easy for us to detect it, using the following heuristics:</p><ul><li>Iterate over all processes, and</li><li>if any process has an environment variable starting with “COMPlus_” then it is suspicious.</li></ul><p>Our VQL can take advantage of the existing <code>Windows.Forensics.ProcessInfo</code> artifact and simply inspect each process’s environment dictionary</p><p><img src=../../img/1QgWxuYVpwR0yVpqq8LnPkA.png alt></p><p>In the above query we extract each process and its environment dictionary from the <code>Windows.Forensics.ProcessInfo</code> artifact, then iterate over each key and value using the <em>items()</em> plugin, filtering any keys beginning with “COMPlus”.</p><p>To convert this VQL into a detection, we now encapsulate the query in an artifact and hunt all our endpoints for processes that have the environment variable set. In practice, there should not be any legitimate reason to switch off the .NET ETW provider, so if we see this variable set in the environment, it is a very strong signal and requires further investigation.</p><h3 id=conclusions>Conclusions</h3><p>This post introduced the “process” accessor, which exposes process memory to all VQL plugins that can usually access files. The process accessor allows us to implement memory analysis techniques on running processes in real time, safely, quickly and reliably, without needing to resort to acquiring and analysing full physical memory images. This provides unprecedented visibility into the state of the endpoint and forms the basis for novel detection and hunting possibilities.</p><p>To use this feature yourself, take<a href=https://github.com/Velocidex/velociraptor> Velociraptor for a spin</a>! It is a available on GitHub under an open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-04-21-the-next-phase-of-velociraptor-bf696c2c3491/index.html b/blog/2021/2021-04-21-the-next-phase-of-velociraptor-bf696c2c3491/index.html
index 885068fa1f9..12dd64a08b2 100644
--- a/blog/2021/2021-04-21-the-next-phase-of-velociraptor-bf696c2c3491/index.html
+++ b/blog/2021/2021-04-21-the-next-phase-of-velociraptor-bf696c2c3491/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Velociraptor is now part of Rapid7 - read about the transition and future plans."><link rel=icon href=/images/favicon.png type=image/png><title>The Next Phase of Velociraptor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-04-21-the-next-phase-of-velociraptor-bf696c2c3491/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-04-21-the-next-phase-of-velociraptor-bf696c2c3491/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=top-github-link><a class=github-link title='Edit this page' href=https://github.com/Velocidex/velociraptor-docs/edit/master/content/blog/2021/2021-04-21-the-next-phase-of-velociraptor-bf696c2c3491/_index.md target=blank><i class="fas fa-code-branch"></i>
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>The Next Phase of Velociraptor</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>The Next Phase of Velociraptor</h1><p>We’ve made great strides on our journey to make the Velociraptor vision come true. We’ve built an open-source Velociraptor to help users deploy a world-class tool for endpoint monitoring, digital forensics, and incident response. Today, I am happy to announce our new home with Rapid7.</p><p>Boston-based <strong>Rapid7,</strong> <strong>provider of security analytics and automation, has acquired the Velociraptor open-source technology and community</strong>. Rapid7 shares our vision and will help us continue to achieve it. We’re gaining a great partner in Rapid7 on this journey.</p><p>In the many years I’ve been in cybersecurity — including time at Australian Signals Directorate (currently known as <a href=https://www.cyber.gov.au/>ACSC</a>), the <a href=https://www.afp.gov.au/what-we-do/crime-types/cyber-crime>Australian Federal Policy</a>, and Google’s DFIR team — I’ve learned that digital forensics and incident response (DFIR) is a unique field. Defenders are typically at a disadvantage for a few reasons:</p><ul><li><p><strong>Attackers only need one of the many possible avenues to compromise the network</strong>, while defenders have to cover all avenues effectively.</p></li><li><p><strong>Defenders have to detect more attacks on the endpoint</strong> as organizations expand their environments beyond the network perimeter to interconnected systems on the internet.</p></li><li><p><strong>New vulnerabilities are being discovered almost daily</strong> and attack tools like ransomware are designed to extract maximum damage from victims (in the good old days, the worst an attacker might achieve is a defaced website!).</p></li><li><p><strong>Building out DFIR capabilities requires specialized knowledge and skills</strong> in the intricacies of operating systems, web technologies and networking just to understand the advisories, let alone to detect breaches on the network.</p></li></ul><p>Velociraptor was born from these observations. As an open-source developer and contributor for many years, it became clear to me that the way forward lies in open source and, more importantly, the ability of open source to bring together a community of users and developers. No one person, team or company can cover the entire DFIR field quickly and sufficiently enough. It is clearly a task for a community effort!</p><p>I also observed that existing open-source tools required a high-level of development skills to contribute code, and had a long release/deployment cycle. Velociraptor’s unique approach is to provide powerful building blocks accessible through a simple query language called VQL. Having an intermediate query language as the mechanism to write new detection, collection and analysis capabilities in Velociraptor facilitates the following goals:</p><ul><li><p><strong>VQL must be simpler to learn than a full-featured programming language</strong> to lower the barrier to entry for prospective contributors. In many cases, VQL can be tweaked from existing queries to cover novel detection or analysis techniques using primitives already available in Velociraptor (like NTFS analysis) but combined in novel ways.</p></li><li><p><strong>VQL must be able to be deployed quickly.</strong> Since VQL queries can be added at runtime without the need to rebuild or re-deploy endpoint software, they can be used instantly to hunt for new indicators in minutes.</p></li></ul><p>The Velociraptor vision is that VQL queries are the medium of information sharing and exchange between DFIR experts, researchers, and the users who are desperately trying to determine if their networks are compromised.</p><p>Attack methods are becoming more sophisticated all the time, and the techniques required to detect these go far beyond simple hashes, event log forwarding, and Yara signature of current technology. Techniques such as analysis of evidence of execution, low-level NTFS artifacts, parsing process memory and various artifacts left behind on disk are now required to reconstruct the attack timeline for effective detection and remediation. It is clear that Velociraptor needs to provide access to these advanced analysis techniques to enable sophisticated novel detection at scale on the endpoint.</p><p><strong>A new partnership</strong></p><p>I am very excited that Rapid7 shares our community’s vision and will help us achieve it. The one aspect I was really excited about is Rapid7’s commitment to open source and track record of responsible stewardship. The company created an open-source community of its own with <a href=https://attackerkb.com/>AttackerKB</a>, a community-driven platform where security professionals exchange information about vulnerabilities to better understand the impact and likelihood of being exploited. And Rapid7 has been shepherding and supporting the <a href=https://www.metasploit.com/>Metasploit</a> Project, which it acquired nearly a dozen years ago.</p><p>The Metasploit Project is still one of the most consistently active open-source security projects and communities in the world. Rapid7 recognizes the immense value of ongoing collaboration between the community and the Metasploit open-source team, and the company has continued to invest in and nurture Metasploit. In return, the Metasploit community has built trust with Rapid7. Under Rapid7’s stewardship, the Metasploit Project continues to grow, thrive, and evolve.</p><p>There is a great synergy between Metasploit — the standard red team framework — and Velociraptor — the standard blue team platform. When a new vulnerability or exploit is published, the Metasploit project implements a module targeting it within days. Imagine a Velociraptor VQL query being published within a similar timeline! Rapid7 is a natural choice for nurturing and drawing from the collective knowledge of both red and blue teams.</p><p>Much like Rapid7 has done for Metasploit, the company is committed to building the Velociraptor community. I will be joining Rapid7 to continue leadership and support of the community — with all of the resources of Rapid7 to back me up — so, together, we may improve the state of blue teaming and defense.</p><p>Rapid7 also has a vibrant services team that experiences daily the cybersecurity breaches that we are trying to defend against. Having practical, hands-on exposure to current and emerging threats places Rapid7 in the unique position of contributing and supporting Velociraptor — thereby feeding a lot of the practical, real-world experience to the community in the form of effective, well-tested VQL queries. Additionally, integrating Velociraptor into a large-scale detection capability will provide the impetus to develop a highly scalable Velociraptor server that’s able to serve a large number of endpoints efficiently.</p><p>Rapid7’s commitment to the future of the Velociraptor community will ensure that Velociraptor is well-known globally. With conference appearances and community events, Rapid7 will promote the tool, grow the community, increase the types of users, and cater to a wider set of needs. This will benefit the entire community, as Velociraptor’s capabilities are improved.</p><p>Rapid7 will enable Velociraptor to graduate to the “next level” in terms of scale, development velocity, stability and capability by drawing on a wide-range of capable and experienced people to support the project. I am very excited to see the Velociraptor vision coming true.</p><p>There are no plans to commercialize Velociraptor. However, the Managed Detection and Response teams at Rapid7 will immediately leverage Velociraptor and insights from the community to enhance its incident response capabilities for customers. Further, integration of Velociraptor’s endpoint data collection capabilities with Rapid7’s Insight agent will greatly increase Rapid7’s endpoint visibility and detection capabilities and deliver immediate benefits to its customers.</p><p>Finally, dear reader, if you also share our vision for a powerful and free open-source platform to enable blue-teamers to quickly hunt, detect, and remediate novel threats, consider joining our community. Download Velociraptor from <a href=https://github.com/Velocidex/velociraptor>GitHub</a>, kick the tires, and provide feedback.</p><p><strong>Check out the <a href=https://www.rapid7.com/blog/post/2021/04/21/rapid7-and-velociraptor-join-forces>blog</a> Rapid7 posted</strong> about their commitment to supporting this community.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<span class=links>The Next Phase of Velociraptor</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>The Next Phase of Velociraptor</h1><p>We’ve made great strides on our journey to make the Velociraptor vision come true. We’ve built an open-source Velociraptor to help users deploy a world-class tool for endpoint monitoring, digital forensics, and incident response. Today, I am happy to announce our new home with Rapid7.</p><p>Boston-based <strong>Rapid7,</strong> <strong>provider of security analytics and automation, has acquired the Velociraptor open-source technology and community</strong>. Rapid7 shares our vision and will help us continue to achieve it. We’re gaining a great partner in Rapid7 on this journey.</p><p>In the many years I’ve been in cybersecurity — including time at Australian Signals Directorate (currently known as <a href=https://www.cyber.gov.au/>ACSC</a>), the <a href=https://www.afp.gov.au/what-we-do/crime-types/cyber-crime>Australian Federal Policy</a>, and Google’s DFIR team — I’ve learned that digital forensics and incident response (DFIR) is a unique field. Defenders are typically at a disadvantage for a few reasons:</p><ul><li><p><strong>Attackers only need one of the many possible avenues to compromise the network</strong>, while defenders have to cover all avenues effectively.</p></li><li><p><strong>Defenders have to detect more attacks on the endpoint</strong> as organizations expand their environments beyond the network perimeter to interconnected systems on the internet.</p></li><li><p><strong>New vulnerabilities are being discovered almost daily</strong> and attack tools like ransomware are designed to extract maximum damage from victims (in the good old days, the worst an attacker might achieve is a defaced website!).</p></li><li><p><strong>Building out DFIR capabilities requires specialized knowledge and skills</strong> in the intricacies of operating systems, web technologies and networking just to understand the advisories, let alone to detect breaches on the network.</p></li></ul><p>Velociraptor was born from these observations. As an open-source developer and contributor for many years, it became clear to me that the way forward lies in open source and, more importantly, the ability of open source to bring together a community of users and developers. No one person, team or company can cover the entire DFIR field quickly and sufficiently enough. It is clearly a task for a community effort!</p><p>I also observed that existing open-source tools required a high-level of development skills to contribute code, and had a long release/deployment cycle. Velociraptor’s unique approach is to provide powerful building blocks accessible through a simple query language called VQL. Having an intermediate query language as the mechanism to write new detection, collection and analysis capabilities in Velociraptor facilitates the following goals:</p><ul><li><p><strong>VQL must be simpler to learn than a full-featured programming language</strong> to lower the barrier to entry for prospective contributors. In many cases, VQL can be tweaked from existing queries to cover novel detection or analysis techniques using primitives already available in Velociraptor (like NTFS analysis) but combined in novel ways.</p></li><li><p><strong>VQL must be able to be deployed quickly.</strong> Since VQL queries can be added at runtime without the need to rebuild or re-deploy endpoint software, they can be used instantly to hunt for new indicators in minutes.</p></li></ul><p>The Velociraptor vision is that VQL queries are the medium of information sharing and exchange between DFIR experts, researchers, and the users who are desperately trying to determine if their networks are compromised.</p><p>Attack methods are becoming more sophisticated all the time, and the techniques required to detect these go far beyond simple hashes, event log forwarding, and Yara signature of current technology. Techniques such as analysis of evidence of execution, low-level NTFS artifacts, parsing process memory and various artifacts left behind on disk are now required to reconstruct the attack timeline for effective detection and remediation. It is clear that Velociraptor needs to provide access to these advanced analysis techniques to enable sophisticated novel detection at scale on the endpoint.</p><p><strong>A new partnership</strong></p><p>I am very excited that Rapid7 shares our community’s vision and will help us achieve it. The one aspect I was really excited about is Rapid7’s commitment to open source and track record of responsible stewardship. The company created an open-source community of its own with <a href=https://attackerkb.com/>AttackerKB</a>, a community-driven platform where security professionals exchange information about vulnerabilities to better understand the impact and likelihood of being exploited. And Rapid7 has been shepherding and supporting the <a href=https://www.metasploit.com/>Metasploit</a> Project, which it acquired nearly a dozen years ago.</p><p>The Metasploit Project is still one of the most consistently active open-source security projects and communities in the world. Rapid7 recognizes the immense value of ongoing collaboration between the community and the Metasploit open-source team, and the company has continued to invest in and nurture Metasploit. In return, the Metasploit community has built trust with Rapid7. Under Rapid7’s stewardship, the Metasploit Project continues to grow, thrive, and evolve.</p><p>There is a great synergy between Metasploit — the standard red team framework — and Velociraptor — the standard blue team platform. When a new vulnerability or exploit is published, the Metasploit project implements a module targeting it within days. Imagine a Velociraptor VQL query being published within a similar timeline! Rapid7 is a natural choice for nurturing and drawing from the collective knowledge of both red and blue teams.</p><p>Much like Rapid7 has done for Metasploit, the company is committed to building the Velociraptor community. I will be joining Rapid7 to continue leadership and support of the community — with all of the resources of Rapid7 to back me up — so, together, we may improve the state of blue teaming and defense.</p><p>Rapid7 also has a vibrant services team that experiences daily the cybersecurity breaches that we are trying to defend against. Having practical, hands-on exposure to current and emerging threats places Rapid7 in the unique position of contributing and supporting Velociraptor — thereby feeding a lot of the practical, real-world experience to the community in the form of effective, well-tested VQL queries. Additionally, integrating Velociraptor into a large-scale detection capability will provide the impetus to develop a highly scalable Velociraptor server that’s able to serve a large number of endpoints efficiently.</p><p>Rapid7’s commitment to the future of the Velociraptor community will ensure that Velociraptor is well-known globally. With conference appearances and community events, Rapid7 will promote the tool, grow the community, increase the types of users, and cater to a wider set of needs. This will benefit the entire community, as Velociraptor’s capabilities are improved.</p><p>Rapid7 will enable Velociraptor to graduate to the “next level” in terms of scale, development velocity, stability and capability by drawing on a wide-range of capable and experienced people to support the project. I am very excited to see the Velociraptor vision coming true.</p><p>There are no plans to commercialize Velociraptor. However, the Managed Detection and Response teams at Rapid7 will immediately leverage Velociraptor and insights from the community to enhance its incident response capabilities for customers. Further, integration of Velociraptor’s endpoint data collection capabilities with Rapid7’s Insight agent will greatly increase Rapid7’s endpoint visibility and detection capabilities and deliver immediate benefits to its customers.</p><p>Finally, dear reader, if you also share our vision for a powerful and free open-source platform to enable blue-teamers to quickly hunt, detect, and remediate novel threats, consider joining our community. Download Velociraptor from <a href=https://github.com/Velocidex/velociraptor>GitHub</a>, kick the tires, and provide feedback.</p><p><strong>Check out the <a href=https://www.rapid7.com/blog/post/2021/04/21/rapid7-and-velociraptor-join-forces>blog</a> Rapid7 posted</strong> about their commitment to supporting this community.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-04-29-scaling-velociraptor-57acc4df76ed/index.html b/blog/2021/2021-04-29-scaling-velociraptor-57acc4df76ed/index.html
index 8f01ef692b8..cea13a90f6e 100644
--- a/blog/2021/2021-04-29-scaling-velociraptor-57acc4df76ed/index.html
+++ b/blog/2021/2021-04-29-scaling-velociraptor-57acc4df76ed/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Velociraptor is an endpoint visibility tool designed to query a large number of endpoints quickly and efficiently. This post introduces the new experimental multi-server architecture that is released in the 0.5.9 release."><link rel=icon href=/images/favicon.png type=image/png><title>Scaling Velociraptor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-04-29-scaling-velociraptor-57acc4df76ed/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-04-29-scaling-velociraptor-57acc4df76ed/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Scaling Velociraptor</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#hunting-at-scale>Hunting at scale</a><ul><li><a href=#what-are-the-bottlenecks-of-scale>What are the bottlenecks of scale?</a></li><li><a href=#can-we-add-more-frontend-servers>Can we add more frontend servers?</a></li><li><a href=#the-datastore>The datastore</a></li><li><a href=#message-passing>Message passing</a></li><li><a href=#multi-frontend-architecture>Multi frontend architecture</a></li><li><a href=#load-balancing>Load balancing</a></li><li><a href=#current-implementation>Current implementation</a></li><li><a href=#conclusions>Conclusions</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags><div class=tags><a class=tag-link href=/tags/server>Server</a>
 <a class=tag-link href=/tags/scalability>Scalability</a>
-<a class=tag-link href=/tags/velociraptor>Velociraptor</a></div></div><div id=body-inner><h1>Scaling Velociraptor</h1><h2 id=hunting-at-scale>Hunting at scale</h2><p><img src=../../img/0Y8UjXi9oQPXRRSsz.jpeg alt></p><p>Velociraptor is an endpoint visibility tool designed to query a large number of endpoints quickly and efficiently. In previous releases, Velociraptor was restricted to a single server performing all functions, such as serving the GUI, the gRPC API as well as connections to the clients (endpoint agents). While this architecture is regularly used to serve up to 10k-15k endpoints, at high number of endpoints, we are starting to hit limitations with the single server model.</p><p>This post introduces the new experimental multi-server architecture that is released in the 0.5.9 release.</p><h3 id=what-are-the-bottlenecks-of-scale>What are the bottlenecks of scale?</h3><p>If you have ever used Velociraptor on a small network of endpoints (say between 2k-5k endpoints), you would be accustomed to a snappy GUI, with the ability to query any of the currently connected endpoints instantly. Velociraptor clients typically do not poll, but are constantly connected to the server— this means that when tasking a new collection on an endpoint, we expect it to respond instantly.</p><p>As the number of endpoints increase this performance degrades. When forwarding a large number of events from the end points, or performing hunt that transfer a lot of data, one might experience sluggish performance.</p><p>However, Velociraptor is designed to operate reliably even under loaded conditions. Velociraptor maintains server stability under load by employing a number of limits:</p><ol><li><p>Concurrency — This setting controls how many clients will be served at the same time. Typically clients upload their responses (JSON blobs or bulk file data) in HTTP POST up to 5mb in size. Since it takes a certain amount of memory to serve each client at the same time, without concurrency control it is difficult to control total server memory usage.</p></li><li><p>Load shedding — The server accepts client connections up to a certain rate (QPS limit). Above this rate, the server will refuse to connect, causing clients to back off and retry the connection later. This approach maintains server stability by spreading client uploads over time and capping the total client connections the server is seeing at each point in time.</p></li><li><p>Hunt client recruitment limits — Velociraptor limits the rate at which endpoints are assigned to a hunt (By default 100 per second). This therefore limits the rate at which responses come back and has the effect of spreading load over time.</p></li></ol><p>These limits are designed to keep the server responsive and stable, but at high load they result in undesirable degradation of performance — in particular GUI performance suffers. Due to Golang’s fair scheduling algorithm, GUI requests are scheduled at the same priority as client requests — so as client number increases, the GUI become less responsive.</p><h3 id=can-we-add-more-frontend-servers>Can we add more frontend servers?</h3><p>The natural solution to the scale problem is to add more frontend servers, so that each frontend server handles a fraction of the clients. To understand what is required for a multi frontend design, let’s consider the main tasks of the frontend:</p><ol><li><p>TLS encryption — Frontends need to encrypt and decrypt client communication using TLS. This is a CPU intensive operation (This cost can be limited to some extent by using TLS offloading), which will benefit from multiple servers.</p></li><li><p>Distribute new work for clients — Since clients are constantly connected we need a way to notify a given frontend that new work is available for a client. A client may be connected to any frontend server, so we need a good way to notify all servers there is new work.</p></li><li><p>Receive query results from clients — Each frontend needs to receive the results and store that in the backend storage solution. The results of a query may be a row-set (i.e. JSONL files) or bulk upload data. We need a good distributed storage solution that can be accessed by multiple servers.</p></li><li><p>Receive events from the client and potentially act on them — Clients can run monitoring queries, forwarding real time information about the endpoint. These events may trigger further processing on the server (e.g. upload to Elastic). We need a good way to replicate these events between servers.</p></li></ol><h3 id=the-datastore>The datastore</h3><p>Currently Velociraptor’s data store consists of flat files stored on the local disk. Since Velociraptor is primarily a collection tool, flat files work well. However, having files on the local disk means that it is impossible to share the datastore between multiple frontends running on different machines.</p><p>Previously, Velociraptor featured an experimental MySQL backend to store data. This solved the problem of distributing the data between frontends, by having all frontends connect to a central MySQL server. However, in practice the additional overheads introduced by the MySQL abstraction resulted in major performance degradation, and this data store was deprecated.</p><p>A more direct way to share files between multiple machines is via NFS or on AWS, <a href=https://docs.aws.amazon.com/efs/latest/ug/how-it-works.html>EFS</a> (Google has a similar product called <a href=https://cloud.google.com/filestore>Filestore</a>). This works very well and is a great fit for the Velociraptor data access pattern:</p><ul><li><p>Frontends always append to files, generally file data is not modified after writing (Think of a VQL Query results set — these are simple JSONL files that are written in chunks but never modified once written)</p></li><li><p>The same file is never written by multiple frontends at the same time — each file exists within the client’s path and therefore is only accessed by one client at the time. Since a client is only connected to a single frontend, there is no need for complicated locking schemes.</p></li></ul><p>The result is that Velociraptor’s data store is truly lock free, and therefore we do not need to worry about NFS file locking (which is often complicated or not implemented).</p><p>Additionally, cloud providers offer highly scalable NFS services with essentially unlimited storage and very high IO bandwidth. This makes it operationally easier to manage storage requirements (We often run out of disk space when using a fixed disk attached to a virtual machine). Additionally, EFS is changed per usage so it is easier to budget for it.</p><h3 id=message-passing>Message passing</h3><p>So if we simply run multiple frontends on different machines, load balance our clients to these frontends, and have all separate frontends simply write to the same shared NFS directory, this should work?</p><p>Not quite! Consider the following simple scenario, where multiple frontends are all sharing the same data store:</p><p><img src=../../img/0gm3Boo6wDiHX4bDP alt></p><p>The admin browser (on the left) is connected to the GUI on one frontend, and is tasking a new collection from a client which happened to be connected to another frontend (on the right). There is no way to tell that client there is new work for it. Remember that Velociraptor does not rely on polling, all clients are always connected and can be tasked immediately! So we really need a low latency mechanism to inform the client that new work is available.</p><p>In order to facilitate this there has to be a way for frontends to communicate with each other and pass messages with very low latency (i.e. we need a message passing architecture). The GUI needs to simply message all frontends that a new collection is scheduled for a particular client, and the one frontend which presently has that client connected will immediately task it.</p><h3 id=multi-frontend-architecture>Multi frontend architecture</h3><p>The latest release (0.5.9) features a multi frontend architecture. To simplify the message passing design, we designate one frontend as the <strong>Master</strong> and the other servers as the <strong>Minions.</strong> Velociraptor implements a simple steaming gRPC based <strong>replication service</strong> — replicating messages from each minion server to the master and from the master to all minion servers.</p><p><img src=../../img/0cb6CiHW_m4COLHtf alt></p><p>Minions receive events from the Master and generate events to send to the master, while the Master brokers all messages between minions. The Master node also runs the GUI and some other services, but the bulk of the client communication and collection is handled by the Minions.</p><p>Note that in this architecture, the GUI is running on a single frontend, and the number of clients handled by it can be reduced, keeping the GUI particularly responsive.</p><h3 id=load-balancing>Load balancing</h3><p>In order to spread the load evenly between the multiple frontends, it is possible to use a load balancer in front of all the frontends.</p><p>As an alternative, it is possible to allow the Velociraptor clients themselves to load balance by providing multiple frontend URLs within the clients’ configuration. Clients will pick a frontend in random and rotate through the frontends randomly. This should result in relatively even distribution of clients between all the frontends.</p><h3 id=current-implementation>Current implementation</h3><p>The upcoming 0.5.9 release uses command line arguments to control the type of frontend. By default a frontend will be started as a master, starting all services including the GUI in process. This is exactly the same behavior as the previous single frontend architecture so it should not affect existing users.</p><p>In order to allow minion frontends to connect one must:</p><ol><li><p>Mount the EFS or NFS directory on both master and all minion servers adjusting the <strong>Datastore.location</strong> path in the configuration file if needed.</p></li><li><p>Add a new frontend using the <strong>velociraptor config frontend</strong> command</p></li></ol><p>In order to start a minion frontend, one must specify the minion flag and the name of the node (the name consists of the dns name of the frontend followed by the port). The process is illustrated below.</p><p><img src=../../img/1_rSIMZokO0O4i2SGfuep3w.png alt></p><h3 id=conclusions>Conclusions</h3><p>The new architecture is still experimental but shows great promise to be able to scale Velociraptor to the next level. We need contributions from the community with polishing the new architecture and making it easier to deploy in wide deployment scenarios (for example Terraform templates, or docker files).</p><p>If you would like to contribute to this effort, take<a href=https://github.com/Velocidex/velociraptor> Velociraptor for a spin</a>! It is a available on GitHub under an open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<a class=tag-link href=/tags/velociraptor>Velociraptor</a></div></div><div id=body-inner><h1>Scaling Velociraptor</h1><h2 id=hunting-at-scale>Hunting at scale</h2><p><img src=../../img/0Y8UjXi9oQPXRRSsz.jpeg alt></p><p>Velociraptor is an endpoint visibility tool designed to query a large number of endpoints quickly and efficiently. In previous releases, Velociraptor was restricted to a single server performing all functions, such as serving the GUI, the gRPC API as well as connections to the clients (endpoint agents). While this architecture is regularly used to serve up to 10k-15k endpoints, at high number of endpoints, we are starting to hit limitations with the single server model.</p><p>This post introduces the new experimental multi-server architecture that is released in the 0.5.9 release.</p><h3 id=what-are-the-bottlenecks-of-scale>What are the bottlenecks of scale?</h3><p>If you have ever used Velociraptor on a small network of endpoints (say between 2k-5k endpoints), you would be accustomed to a snappy GUI, with the ability to query any of the currently connected endpoints instantly. Velociraptor clients typically do not poll, but are constantly connected to the server— this means that when tasking a new collection on an endpoint, we expect it to respond instantly.</p><p>As the number of endpoints increase this performance degrades. When forwarding a large number of events from the end points, or performing hunt that transfer a lot of data, one might experience sluggish performance.</p><p>However, Velociraptor is designed to operate reliably even under loaded conditions. Velociraptor maintains server stability under load by employing a number of limits:</p><ol><li><p>Concurrency — This setting controls how many clients will be served at the same time. Typically clients upload their responses (JSON blobs or bulk file data) in HTTP POST up to 5mb in size. Since it takes a certain amount of memory to serve each client at the same time, without concurrency control it is difficult to control total server memory usage.</p></li><li><p>Load shedding — The server accepts client connections up to a certain rate (QPS limit). Above this rate, the server will refuse to connect, causing clients to back off and retry the connection later. This approach maintains server stability by spreading client uploads over time and capping the total client connections the server is seeing at each point in time.</p></li><li><p>Hunt client recruitment limits — Velociraptor limits the rate at which endpoints are assigned to a hunt (By default 100 per second). This therefore limits the rate at which responses come back and has the effect of spreading load over time.</p></li></ol><p>These limits are designed to keep the server responsive and stable, but at high load they result in undesirable degradation of performance — in particular GUI performance suffers. Due to Golang’s fair scheduling algorithm, GUI requests are scheduled at the same priority as client requests — so as client number increases, the GUI become less responsive.</p><h3 id=can-we-add-more-frontend-servers>Can we add more frontend servers?</h3><p>The natural solution to the scale problem is to add more frontend servers, so that each frontend server handles a fraction of the clients. To understand what is required for a multi frontend design, let’s consider the main tasks of the frontend:</p><ol><li><p>TLS encryption — Frontends need to encrypt and decrypt client communication using TLS. This is a CPU intensive operation (This cost can be limited to some extent by using TLS offloading), which will benefit from multiple servers.</p></li><li><p>Distribute new work for clients — Since clients are constantly connected we need a way to notify a given frontend that new work is available for a client. A client may be connected to any frontend server, so we need a good way to notify all servers there is new work.</p></li><li><p>Receive query results from clients — Each frontend needs to receive the results and store that in the backend storage solution. The results of a query may be a row-set (i.e. JSONL files) or bulk upload data. We need a good distributed storage solution that can be accessed by multiple servers.</p></li><li><p>Receive events from the client and potentially act on them — Clients can run monitoring queries, forwarding real time information about the endpoint. These events may trigger further processing on the server (e.g. upload to Elastic). We need a good way to replicate these events between servers.</p></li></ol><h3 id=the-datastore>The datastore</h3><p>Currently Velociraptor’s data store consists of flat files stored on the local disk. Since Velociraptor is primarily a collection tool, flat files work well. However, having files on the local disk means that it is impossible to share the datastore between multiple frontends running on different machines.</p><p>Previously, Velociraptor featured an experimental MySQL backend to store data. This solved the problem of distributing the data between frontends, by having all frontends connect to a central MySQL server. However, in practice the additional overheads introduced by the MySQL abstraction resulted in major performance degradation, and this data store was deprecated.</p><p>A more direct way to share files between multiple machines is via NFS or on AWS, <a href=https://docs.aws.amazon.com/efs/latest/ug/how-it-works.html>EFS</a> (Google has a similar product called <a href=https://cloud.google.com/filestore>Filestore</a>). This works very well and is a great fit for the Velociraptor data access pattern:</p><ul><li><p>Frontends always append to files, generally file data is not modified after writing (Think of a VQL Query results set — these are simple JSONL files that are written in chunks but never modified once written)</p></li><li><p>The same file is never written by multiple frontends at the same time — each file exists within the client’s path and therefore is only accessed by one client at the time. Since a client is only connected to a single frontend, there is no need for complicated locking schemes.</p></li></ul><p>The result is that Velociraptor’s data store is truly lock free, and therefore we do not need to worry about NFS file locking (which is often complicated or not implemented).</p><p>Additionally, cloud providers offer highly scalable NFS services with essentially unlimited storage and very high IO bandwidth. This makes it operationally easier to manage storage requirements (We often run out of disk space when using a fixed disk attached to a virtual machine). Additionally, EFS is changed per usage so it is easier to budget for it.</p><h3 id=message-passing>Message passing</h3><p>So if we simply run multiple frontends on different machines, load balance our clients to these frontends, and have all separate frontends simply write to the same shared NFS directory, this should work?</p><p>Not quite! Consider the following simple scenario, where multiple frontends are all sharing the same data store:</p><p><img src=../../img/0gm3Boo6wDiHX4bDP alt></p><p>The admin browser (on the left) is connected to the GUI on one frontend, and is tasking a new collection from a client which happened to be connected to another frontend (on the right). There is no way to tell that client there is new work for it. Remember that Velociraptor does not rely on polling, all clients are always connected and can be tasked immediately! So we really need a low latency mechanism to inform the client that new work is available.</p><p>In order to facilitate this there has to be a way for frontends to communicate with each other and pass messages with very low latency (i.e. we need a message passing architecture). The GUI needs to simply message all frontends that a new collection is scheduled for a particular client, and the one frontend which presently has that client connected will immediately task it.</p><h3 id=multi-frontend-architecture>Multi frontend architecture</h3><p>The latest release (0.5.9) features a multi frontend architecture. To simplify the message passing design, we designate one frontend as the <strong>Master</strong> and the other servers as the <strong>Minions.</strong> Velociraptor implements a simple steaming gRPC based <strong>replication service</strong> — replicating messages from each minion server to the master and from the master to all minion servers.</p><p><img src=../../img/0cb6CiHW_m4COLHtf alt></p><p>Minions receive events from the Master and generate events to send to the master, while the Master brokers all messages between minions. The Master node also runs the GUI and some other services, but the bulk of the client communication and collection is handled by the Minions.</p><p>Note that in this architecture, the GUI is running on a single frontend, and the number of clients handled by it can be reduced, keeping the GUI particularly responsive.</p><h3 id=load-balancing>Load balancing</h3><p>In order to spread the load evenly between the multiple frontends, it is possible to use a load balancer in front of all the frontends.</p><p>As an alternative, it is possible to allow the Velociraptor clients themselves to load balance by providing multiple frontend URLs within the clients’ configuration. Clients will pick a frontend in random and rotate through the frontends randomly. This should result in relatively even distribution of clients between all the frontends.</p><h3 id=current-implementation>Current implementation</h3><p>The upcoming 0.5.9 release uses command line arguments to control the type of frontend. By default a frontend will be started as a master, starting all services including the GUI in process. This is exactly the same behavior as the previous single frontend architecture so it should not affect existing users.</p><p>In order to allow minion frontends to connect one must:</p><ol><li><p>Mount the EFS or NFS directory on both master and all minion servers adjusting the <strong>Datastore.location</strong> path in the configuration file if needed.</p></li><li><p>Add a new frontend using the <strong>velociraptor config frontend</strong> command</p></li></ol><p>In order to start a minion frontend, one must specify the minion flag and the name of the node (the name consists of the dns name of the frontend followed by the port). The process is illustrated below.</p><p><img src=../../img/1_rSIMZokO0O4i2SGfuep3w.png alt></p><h3 id=conclusions>Conclusions</h3><p>The new architecture is still experimental but shows great promise to be able to scale Velociraptor to the next level. We need contributions from the community with polishing the new architecture and making it easier to deploy in wide deployment scenarios (for example Terraform templates, or docker files).</p><p>If you would like to contribute to this effort, take<a href=https://github.com/Velocidex/velociraptor> Velociraptor for a spin</a>! It is a available on GitHub under an open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-06-09-verifying-executables-on-windows-1b3518122d3c/index.html b/blog/2021/2021-06-09-verifying-executables-on-windows-1b3518122d3c/index.html
index 6a1e8ae554a..766b07c5cb7 100644
--- a/blog/2021/2021-06-09-verifying-executables-on-windows-1b3518122d3c/index.html
+++ b/blog/2021/2021-06-09-verifying-executables-on-windows-1b3518122d3c/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="How do we know if a windows executable is a legitimate program written by the purported developer and not malware?  This post covers the basics of Authenticode signatures in windows and how to verify and query them using Velociraptor."><link rel=icon href=/images/favicon.png type=image/png><title>Verifying executables on Windows :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-06-09-verifying-executables-on-windows-1b3518122d3c/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-06-09-verifying-executables-on-windows-1b3518122d3c/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -95,4 +95,4 @@
 file” instead of each individual binary. The catalog file is
 essentially a list of authenticode hashes that are all
 trusted. Catalog files are stored in
-<code>C:\Windows\system32\CatRoot\{F750E6C3–38EE-11D1–85E5–00C04FC295EE}</code></p><p>While .cat files are simply encoded in PKCS#7 format, they do contain a few Microsoft specific objects. Velociraptor can parse the PKCS#7 files directly and supports the extra extensions using the parse_pkcs7() VQL function.</p><p><img src=../../img/1WZ7Zezy8CRueD28qxklK7g.png alt></p><p>As can be seen in the above query, the cat file consists of a signer, and a list of hashes. Typically no filenames will be given for the hash (although sometimes there will be a filename hint). It is only the hashes that are important in cat files — this allows files to be renamed, but still verified.</p><p>Again these hashes are authenticode hashes as before, so you can not compare them against our usual hash databases like Virus Total. You can calculate the authenticode hash of a PE File using the VQL: <em>parse_pe(file=FileName).AuthenticodeHash</em></p><p>To verify that a PE file on disk is signed, one must:</p><ol><li><p>Calculate the Authenticode PE hash of the file.</p></li><li><p>Enumerate all cat files on the system</p></li><li><p>Parse each cat file to extract the list of hashes</p></li><li><p>Check if any of these hashes match the one calculated in step 1.</p></li></ol><p>This process is obviously too slow for the OS itself to use. To speed things up, Windows uses a shortcut: A database file exists on the system which simply contains all the trusted hashes directly. The database uses the Microsoft ESE format and is located in C:\Windows\System32\catroot2*\catdb</p><p><img src=../../img/1LRhZH248S7dbHAW9vPOgbw.png alt></p><p>The file is typically locked so you would need to use Velociraptor to collect it (Velociraptor will automatically parse the file out of the NTFS volume). The database contains tables mapping the hash to a cat file name and may contain hashes of old cat files that have been uninstalled from the system.</p><h3 id=verifying-signed-files>Verifying Signed files</h3><p>So far we have learned how authenticode stores hashes in the PE file and we can verify if the hash of the current file matches the hash within the signature information, but how can we trust that this hash is correct?</p><p>To really verify a signature, Windows must verify the trust chain by following the certificates to a trusted root certificate. Windows maintains a list of trusted certificates in a “Certificate Root Store” within the registry. There are several stores, a main one for the OS and each user also has a certificate store in their NTUSER.dat hive.</p><p>Velociraptor can inspect the certificate root store using the certificates() plugin. This plugin uses the Windows APIs to query the root store and report the trusted certificates. It is typically important to verify the trusted certificate root store since if a adversary adds a new certificate to the root store, their executables will be trusted by the OS.</p><p>For example, I added the Velociraptor CA (a self signed CA cert) to the windows root store below. I can see now that Windows trusts this certificate</p><p><img src=../../img/1wfJvLYsB8lD2iCMkHmMk2g.png alt></p><p>Where are the trusted certificates stored on the system? A quick registry search will show a set of keys and values for the trusted certificates within the windows registry</p><p><img src=../../img/1ixxSaOLeJm2KtbEzMQu06A.png alt></p><p>The values are undocumented binary data. Luckily, Didier Stevens has previously written about the format of these registry keys <a href=https://blog.nviso.eu/2019/08/28/extracting-certificates-from-the-windows-registry/>here</a> explaining these are simple length encoded items.</p><p>We can use Velociraptor’s built in binary parser to automatically parse these keys. The details are in the <a href=https://github.com/Velocidex/velociraptor/blob/master/artifacts/definitions/Windows/System/RootCAStore.yaml>Windows.System.RootCAStore artifact</a> but collecting it from the endpoint is easy</p><p><img src=../../img/1woqK6rwmqIgZRoFqH6rj_w.png alt></p><p>An added bonus of parsing the certificate directly from the registry keys is that now we have a registry key modification time to indicate when the certificate was installed into the root store. A quick VQL search to narrow down recently installed certificates can quickly zero in on malicious alterations and provide a timeline of compromise. Adding new certificates to a root store is not commonly done and even then they are likely to be done by a software update (so they should apply to most systems in the fleet). A hunt collecting this artifact and stacking by frequency can reveal compromises in minutes.</p><p><img src=../../img/1AtlKRrylrUZn6voUArJb6A.png alt></p><h3 id=putting-it-all-together>Putting it all together</h3><p>In this blog post we looked at how authenticode signing works on Windows. We found that authenticode signatures can be embedded within the PE file, but that is not the whole story. Sometimes signatures are applied to a catalog file which contains the hash of the PE file instead.</p><p>Ultimately we simply need to know if a particular binary file is trusted or not. Velociraptor’s authenticode() function was upgraded in the 0.6.0 release to support both methods of trust automatically. Simply apply it to the PE file and it will include the method of trust as well.</p><p><img src=../../img/1VjBA5LZYvkpJaIBc-AtEAA.png alt></p><p>The above screenshot shows both our examples — The velociraptor binary was signed via embedded signature on the right and Notepad.exe was signed via catalog. In both cases Velociraptor is showing the signer and their issuers and if the file is trusted. We additionally get the catalog file that is used to verify the file if applicable.</p><p>If you would like to quickly verify your windows executables at scale, take<a href=https://github.com/Velocidex/velociraptor> Velociraptor for a spin</a>! It is available on GitHub under an open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<code>C:\Windows\system32\CatRoot\{F750E6C3–38EE-11D1–85E5–00C04FC295EE}</code></p><p>While .cat files are simply encoded in PKCS#7 format, they do contain a few Microsoft specific objects. Velociraptor can parse the PKCS#7 files directly and supports the extra extensions using the parse_pkcs7() VQL function.</p><p><img src=../../img/1WZ7Zezy8CRueD28qxklK7g.png alt></p><p>As can be seen in the above query, the cat file consists of a signer, and a list of hashes. Typically no filenames will be given for the hash (although sometimes there will be a filename hint). It is only the hashes that are important in cat files — this allows files to be renamed, but still verified.</p><p>Again these hashes are authenticode hashes as before, so you can not compare them against our usual hash databases like Virus Total. You can calculate the authenticode hash of a PE File using the VQL: <em>parse_pe(file=FileName).AuthenticodeHash</em></p><p>To verify that a PE file on disk is signed, one must:</p><ol><li><p>Calculate the Authenticode PE hash of the file.</p></li><li><p>Enumerate all cat files on the system</p></li><li><p>Parse each cat file to extract the list of hashes</p></li><li><p>Check if any of these hashes match the one calculated in step 1.</p></li></ol><p>This process is obviously too slow for the OS itself to use. To speed things up, Windows uses a shortcut: A database file exists on the system which simply contains all the trusted hashes directly. The database uses the Microsoft ESE format and is located in C:\Windows\System32\catroot2*\catdb</p><p><img src=../../img/1LRhZH248S7dbHAW9vPOgbw.png alt></p><p>The file is typically locked so you would need to use Velociraptor to collect it (Velociraptor will automatically parse the file out of the NTFS volume). The database contains tables mapping the hash to a cat file name and may contain hashes of old cat files that have been uninstalled from the system.</p><h3 id=verifying-signed-files>Verifying Signed files</h3><p>So far we have learned how authenticode stores hashes in the PE file and we can verify if the hash of the current file matches the hash within the signature information, but how can we trust that this hash is correct?</p><p>To really verify a signature, Windows must verify the trust chain by following the certificates to a trusted root certificate. Windows maintains a list of trusted certificates in a “Certificate Root Store” within the registry. There are several stores, a main one for the OS and each user also has a certificate store in their NTUSER.dat hive.</p><p>Velociraptor can inspect the certificate root store using the certificates() plugin. This plugin uses the Windows APIs to query the root store and report the trusted certificates. It is typically important to verify the trusted certificate root store since if a adversary adds a new certificate to the root store, their executables will be trusted by the OS.</p><p>For example, I added the Velociraptor CA (a self signed CA cert) to the windows root store below. I can see now that Windows trusts this certificate</p><p><img src=../../img/1wfJvLYsB8lD2iCMkHmMk2g.png alt></p><p>Where are the trusted certificates stored on the system? A quick registry search will show a set of keys and values for the trusted certificates within the windows registry</p><p><img src=../../img/1ixxSaOLeJm2KtbEzMQu06A.png alt></p><p>The values are undocumented binary data. Luckily, Didier Stevens has previously written about the format of these registry keys <a href=https://blog.nviso.eu/2019/08/28/extracting-certificates-from-the-windows-registry/>here</a> explaining these are simple length encoded items.</p><p>We can use Velociraptor’s built in binary parser to automatically parse these keys. The details are in the <a href=https://github.com/Velocidex/velociraptor/blob/master/artifacts/definitions/Windows/System/RootCAStore.yaml>Windows.System.RootCAStore artifact</a> but collecting it from the endpoint is easy</p><p><img src=../../img/1woqK6rwmqIgZRoFqH6rj_w.png alt></p><p>An added bonus of parsing the certificate directly from the registry keys is that now we have a registry key modification time to indicate when the certificate was installed into the root store. A quick VQL search to narrow down recently installed certificates can quickly zero in on malicious alterations and provide a timeline of compromise. Adding new certificates to a root store is not commonly done and even then they are likely to be done by a software update (so they should apply to most systems in the fleet). A hunt collecting this artifact and stacking by frequency can reveal compromises in minutes.</p><p><img src=../../img/1AtlKRrylrUZn6voUArJb6A.png alt></p><h3 id=putting-it-all-together>Putting it all together</h3><p>In this blog post we looked at how authenticode signing works on Windows. We found that authenticode signatures can be embedded within the PE file, but that is not the whole story. Sometimes signatures are applied to a catalog file which contains the hash of the PE file instead.</p><p>Ultimately we simply need to know if a particular binary file is trusted or not. Velociraptor’s authenticode() function was upgraded in the 0.6.0 release to support both methods of trust automatically. Simply apply it to the PE file and it will include the method of trust as well.</p><p><img src=../../img/1VjBA5LZYvkpJaIBc-AtEAA.png alt></p><p>The above screenshot shows both our examples — The velociraptor binary was signed via embedded signature on the right and Notepad.exe was signed via catalog. In both cases Velociraptor is showing the signer and their issuers and if the file is trusted. We additionally get the catalog file that is used to verify the file if applicable.</p><p>If you would like to quickly verify your windows executables at scale, take<a href=https://github.com/Velocidex/velociraptor> Velociraptor for a spin</a>! It is available on GitHub under an open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/index.html b/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/index.html
index 796b25539c5..a935dea2286 100644
--- a/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/index.html
+++ b/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="The USN journal is a unique source of evidence because it can provide a timeline for when files were deleted, even if the file itself is no longer found on the system. While the USN journal is very useful, it is short lived. This post explains how to write a carver to recover deleted USN journal entries."><link rel=icon href=/images/favicon.png type=image/png><title>Carving $USN journal entries :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -103,4 +103,4 @@
 <strong>Version</strong> must match 2. The timestamp field must end in D? 01
 (i.e. <code>0xD0–0xDF</code> followed by <code>0x01</code>). Finally the filename length
 must be smaller than 256 and the file offset must be exactly 60
-(0x36).</p><p>As you can see above I immediately identify a hit and it looks pretty similar to one of the USN entries I extracted before.</p><h3 id=parsing-the-usn-record>Parsing the USN record</h3><p>The Yara signature will retrieve reasonable candidates for our carver. Now we need to parse the record properly. In order to do that I will use Velociraptor’s binary parser. First I will write a profile to describe the USN struct and apply the parser to extract the MFT entry ID from the record. I can then use Velociraptor’s built in NTFS parser to resolve the MFT entry ID to a full path on disk.</p><p>You can see the full details of the artifact <a href=https://github.com/Velocidex/velociraptor/blob/master/artifacts/definitions/Windows/Carving/USN.yaml>here</a> but collecting this artifact from the endpoint is easy — simply create a new collection and select the Windows.Carving.USN artifact.</p><p><img src=../../img/1hw6F2M-_1EHgaRAjY2-S7A.png alt></p><p>Since carving usually takes a long time, it is likely to exceed the default 10 minute collection timeout. For this artifact it is recommended to increase the timeout in the “Specify Resources” wizard pane (On my system, this artifact scans about 1Gb per minute so an hour will be enough for a 60Gb disk).</p><p><img src=../../img/1Wwe8cBWg01X4l9H3-AMwKQ.png alt></p><p>After a while the carver will produce a lot of interesting hits — some of which might be from a long time before what can normally be found in the USN journal (several months even!). If we are lucky we might see something from the timeframe of our incident.</p><p>We can post process the results to try to put a timeline on a compromise. For example, I will write a post processing query to find all prefetch files that were deleted (Deleting prefetch files is a common <a href=https://attack.mitre.org/techniques/T1070/004/>anti-forensic technique</a>).</p><p><img src=../../img/17oy3DzemUP4M60dfYQYNAw.png alt></p><p>I can see two occasions where prefetch files were removed. I can see the timestamp based on the USN record, as well as the offset into the disk where the hit is found (around 3Gb into the drive).</p><p>Note that in the case of deleted files, the filename stored in the USN record may be completely different than the FullPath shown by the artifact. The FullPath is derived by parsing the NTFS filesystem using the MFT entry id referenced by the USN record.</p><p>For deleted files, the MFT entry may be quickly reused for an unrelated file. The only evidence left on the disk of our deleted prefetch file is in the USN journal, or indeed in USN record fragments we recovered once the journal rolls over.</p><h3 id=conclusions>Conclusions</h3><p>Carving is a useful technique to recover new investigative links or clues. Because carving does not rely on filesystem parsing it might recover older deleted records from a long time ago, or from previously formatted filesystem.</p><p>The flip side is that carving is not very reliable. It is hard to predict if any useful data will be found. Additionally, if the adversary wants to really confuse us they might plant data that happens to look like a USN record — without context we really can not be sure if this data represents a real find or an anti-forensic decoy. A common issue is finding hits in what ends up being Virtual Machine disk images that just happen to have been stored on the system at one time — so the hits do not even relate to the system we are investigating.</p><p>Take all findings with a grain of salt and corroborate findings with other techniques.</p><p>This article demonstrated the general methodology of writing an effective carver — use a fast scanner to extract hits quickly, despite a potentially higher false positive rate (using an engine such as Yara). Then use more thorough parsing techniques to eliminate the false positives and display the results (such as Velociraptor’s built in binary parser). Finally apply VQL conditions to surgically target findings to only relevant records to our investigation.</p><p>To play with this new feature yourself, take Velociraptor for a spin! It is available on <a href=https://github.com/Velocidex/velociraptor>GitHub</a> under an open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+(0x36).</p><p>As you can see above I immediately identify a hit and it looks pretty similar to one of the USN entries I extracted before.</p><h3 id=parsing-the-usn-record>Parsing the USN record</h3><p>The Yara signature will retrieve reasonable candidates for our carver. Now we need to parse the record properly. In order to do that I will use Velociraptor’s binary parser. First I will write a profile to describe the USN struct and apply the parser to extract the MFT entry ID from the record. I can then use Velociraptor’s built in NTFS parser to resolve the MFT entry ID to a full path on disk.</p><p>You can see the full details of the artifact <a href=https://github.com/Velocidex/velociraptor/blob/master/artifacts/definitions/Windows/Carving/USN.yaml>here</a> but collecting this artifact from the endpoint is easy — simply create a new collection and select the Windows.Carving.USN artifact.</p><p><img src=../../img/1hw6F2M-_1EHgaRAjY2-S7A.png alt></p><p>Since carving usually takes a long time, it is likely to exceed the default 10 minute collection timeout. For this artifact it is recommended to increase the timeout in the “Specify Resources” wizard pane (On my system, this artifact scans about 1Gb per minute so an hour will be enough for a 60Gb disk).</p><p><img src=../../img/1Wwe8cBWg01X4l9H3-AMwKQ.png alt></p><p>After a while the carver will produce a lot of interesting hits — some of which might be from a long time before what can normally be found in the USN journal (several months even!). If we are lucky we might see something from the timeframe of our incident.</p><p>We can post process the results to try to put a timeline on a compromise. For example, I will write a post processing query to find all prefetch files that were deleted (Deleting prefetch files is a common <a href=https://attack.mitre.org/techniques/T1070/004/>anti-forensic technique</a>).</p><p><img src=../../img/17oy3DzemUP4M60dfYQYNAw.png alt></p><p>I can see two occasions where prefetch files were removed. I can see the timestamp based on the USN record, as well as the offset into the disk where the hit is found (around 3Gb into the drive).</p><p>Note that in the case of deleted files, the filename stored in the USN record may be completely different than the FullPath shown by the artifact. The FullPath is derived by parsing the NTFS filesystem using the MFT entry id referenced by the USN record.</p><p>For deleted files, the MFT entry may be quickly reused for an unrelated file. The only evidence left on the disk of our deleted prefetch file is in the USN journal, or indeed in USN record fragments we recovered once the journal rolls over.</p><h3 id=conclusions>Conclusions</h3><p>Carving is a useful technique to recover new investigative links or clues. Because carving does not rely on filesystem parsing it might recover older deleted records from a long time ago, or from previously formatted filesystem.</p><p>The flip side is that carving is not very reliable. It is hard to predict if any useful data will be found. Additionally, if the adversary wants to really confuse us they might plant data that happens to look like a USN record — without context we really can not be sure if this data represents a real find or an anti-forensic decoy. A common issue is finding hits in what ends up being Virtual Machine disk images that just happen to have been stored on the system at one time — so the hits do not even relate to the system we are investigating.</p><p>Take all findings with a grain of salt and corroborate findings with other techniques.</p><p>This article demonstrated the general methodology of writing an effective carver — use a fast scanner to extract hits quickly, despite a potentially higher false positive rate (using an engine such as Yara). Then use more thorough parsing techniques to eliminate the false positives and display the results (such as Velociraptor’s built in binary parser). Finally apply VQL conditions to surgically target findings to only relevant records to our investigation.</p><p>To play with this new feature yourself, take Velociraptor for a spin! It is available on <a href=https://github.com/Velocidex/velociraptor>GitHub</a> under an open source license. As always please file issues on the bug tracker or ask questions on our mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> . You can also chat with us directly on discord <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-07-12-velociraptor-vs-printnightmare/index.html b/blog/2021/2021-07-12-velociraptor-vs-printnightmare/index.html
index 81fd2bb8e87..c1316e0200e 100644
--- a/blog/2021/2021-07-12-velociraptor-vs-printnightmare/index.html
+++ b/blog/2021/2021-07-12-velociraptor-vs-printnightmare/index.html
@@ -5,7 +5,7 @@
 determine possible remediations and detect exploitation on their
 network.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor vs Printnightmare :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-07-12-velociraptor-vs-printnightmare/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-07-12-velociraptor-vs-printnightmare/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -164,4 +164,4 @@
 for a spin! It is available on <a href=https://github.com/Velocidex/velociraptor>GitHub</a> under an open source license. As
 always, please file issues on the bug tracker or ask questions on our
 mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a>. You can also chat
-with us directly on discord at <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+with us directly on discord at <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-08-18-velociraptor-and-etw/index.html b/blog/2021/2021-08-18-velociraptor-and-etw/index.html
index 9b0d9fe1696..86a7648b3ba 100644
--- a/blog/2021/2021-08-18-velociraptor-and-etw/index.html
+++ b/blog/2021/2021-08-18-velociraptor-and-etw/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="This post introduces ETW as an event source and examines how VQL can be used to harness the power of ETW.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Event Tracing for Windows Part 1 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-08-18-velociraptor-and-etw/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-08-18-velociraptor-and-etw/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -178,4 +178,4 @@
 where you can win prizes, honor and support the entire DFIR
 community. Alternatively, you can share your artifacts with the community on
 <a href=https://docs.velociraptor.app/exchange/>Velociraptor&rsquo;s Artifact
-Exchange</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+Exchange</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-09-03-process-spoofing/index.html b/blog/2021/2021-09-03-process-spoofing/index.html
index 92b5181bdad..d9c4bd39e5a 100644
--- a/blog/2021/2021-09-03-process-spoofing/index.html
+++ b/blog/2021/2021-09-03-process-spoofing/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="This post takes another look at Event Tracing for Windows and how it can be used to detect a common attacker subversion technique.
 "><link rel=icon href=/images/favicon.png type=image/png><title>ETW Part 2: Process Parent Spoofing :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-09-03-process-spoofing/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-09-03-process-spoofing/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -183,4 +183,4 @@
 where you can win prizes, honor and support the entire DFIR
 community. Alternatively, you can share your artifacts with the
 community on <a href=https://docs.velociraptor.app/exchange/>Velociraptor&rsquo;s Artifact
-Exchange</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+Exchange</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-09-07-release-notes-0.6.1/index.html b/blog/2021/2021-09-07-release-notes-0.6.1/index.html
index d66bbbb8a8b..21adf9b31f0 100644
--- a/blog/2021/2021-09-07-release-notes-0.6.1/index.html
+++ b/blog/2021/2021-09-07-release-notes-0.6.1/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Our latest Velociraptor release contains many new features and bug fixes. This post outlines some of the more interesting changes.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor 0.6.1 Release :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-09-07-release-notes-0.6.1/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-09-07-release-notes-0.6.1/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -238,4 +238,4 @@
 where you can win prizes, honor and support the entire DFIR
 community. Alternatively, you can share your artifacts with the
 community on <a href=https://docs.velociraptor.app/exchange/>Velociraptor&rsquo;s Artifact
-Exchange</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+Exchange</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-09-17-carlos-intro/index.html b/blog/2021/2021-09-17-carlos-intro/index.html
index 77909f6d068..b0ef19dd954 100644
--- a/blog/2021/2021-09-17-carlos-intro/index.html
+++ b/blog/2021/2021-09-17-carlos-intro/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Carlos Canto joins Velociraptor as its new Community Manager.  Read on to learn more.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Welcome to Velociraptor, Carlos :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-09-17-carlos-intro/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-09-17-carlos-intro/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -72,4 +72,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Welcome to Velociraptor, Carlos</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags><div class=tags><a class=tag-link href=/tags/release>Release</a></div></div><div id=body-inner><h1>Welcome to Velociraptor, Carlos</h1><div class="author pull-right">Carlos Canto
 <span class=date>2021-09-17</span></div><p>Hello Velociraptor Community!</p><p>My name is Carlos Canto and I have recently joined Rapid7 as the Community Engagement Manager for Velociraptor. You may be wondering what that means. In a nutshell, my job will be to increase awareness of the Velociraptor project and increase engagement among its users and contributors. Expect to hear from me a lot in the coming weeks as I begin to get my feet wet in all things DFIR. That includes blog posts, emails, social media content and other special events. Our very own digital paleontologist, Mike Cohen, will continue to provide his regular updates and insight as well. In short, we want to make the Velociraptor Community an engaging and rewarding place for everyone involved, but that means we’ll need participation from <strong>YOU</strong> as well.</p><p>You may be wondering what my deal is. So a little bit about me… I have over 10 years experience managing communities of various forms including those in several fields such as investor services, software & hardware testing, and crowdsourcing. I’ve met a lot of great people and have learned a ton along the way, so I hope to bring as much of that experience as I possibly can to this role as well.</p><p>But what makes Carlos tick? Well, when I&rsquo;m not engaging with our amazing VR contributors, you can usually find me at home spending time with my family. I&rsquo;ve had the honor of being married to my lovely wife for the last 13 years and we&rsquo;ve been blessed with two amazing children. They keep me busy, that’s for sure, but I wouldn&rsquo;t trade it away for anything in the world. When I have some free time you can usually find me doing one of the following: watching football, drinking craft beer, mountain biking and playing video games with my kids, not necessarily in that order.</p><p>Enough about me. What I really want is to hear from <strong>YOU</strong>! Remember, this Community doesn’t thrive without active participation from all our contributors. Make your voice heard! Participate in the comments section of the blog. If a particular article or post really speaks to you, let us know what you think. If you haven’t already, follow us on Twitter (@velocidex). Let us know what’s working, what’s not. Share your cool, if only half-baked thoughts &ndash; those sometimes end up being the best kind. We’ll be creating official LinkedIn and Facebook pages as well (details to come).</p><p>Finally, don’t ever hesitate to reach out to me and let me know what’s on your mind. I can be reached at <a href=mailto:carlos_canto@rapid7.com>carlos_canto@rapid7.com</a> or by tweeting <strong>@velocidex</strong>. Additionally, if you have any support or technical questions, you can email <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> and we’ll aim to get back to you ASAP.</p><p>I can’t wait to begin working with all of you!</p><p>Keep digging!
-Carlos</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+Carlos</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-10-08-contributor-contest/index.html b/blog/2021/2021-10-08-contributor-contest/index.html
index fde9a61f7af..00eadf485d5 100644
--- a/blog/2021/2021-10-08-contributor-contest/index.html
+++ b/blog/2021/2021-10-08-contributor-contest/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="The 2021 Velociraptor Contributor Competition has drawn to a close. Take a look at the winners and all the submissions.
 "><link rel=icon href=/images/favicon.png type=image/png><title>The 2021 Contributor Contest :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-10-08-contributor-contest/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-10-08-contributor-contest/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -93,4 +93,4 @@
 such as <code>GENE</code> and <code>CAPA</code> for further triaging.</p><h3 id=references>References:</h3><p><a href=https://github.com/predictiple/VelociraptorCompetition.git>https://github.com/predictiple/VelociraptorCompetition.git</a><br><br><br></p><h2 id=shae-bailey>Shae Bailey</h2><p>Shae contributed a number of artifacts to enhance Cobalt strike
 detection and utilize ETW for real time monitoring.</p><h3 id=references-1>References:</h3><p><a href="https://drive.google.com/drive/folders/1Jr4CJO6y2VZVNl7vRSiuAs8Ys7IDmVub?usp=sharing">https://drive.google.com/drive/folders/1Jr4CJO6y2VZVNl7vRSiuAs8Ys7IDmVub?usp=sharing</a><br><br><br></p><h2 id=eduardo-cunha-mattos>Eduardo Cunha Mattos</h2><p>Eduardo contributed many useful artifacts including a number of MacOS artifacts</p><p>Some highlights include</p><ul><li>Loki integration</li><li>Enriched hollows hunter</li><li>Registry UsrClass</li><li>JECmd integration</li></ul><h3 id=references-2>References</h3><p><a href=https://github.com/eduardomcm/VelociraptorCompetition>https://github.com/eduardomcm/VelociraptorCompetition</a><br><br><br></p><h2 id=jonathan-woodward>Jonathan Woodward</h2><p>Jonathan contributed many MacOS artifacts focusing on acquisition of critical files for DFIR triaging.</p><h3 id=references-3>References</h3><p><a href="https://drive.google.com/drive/folders/1cmmoOkP5tWD9skIAU5ClWRG_uagzUYVO?usp=sharing">https://drive.google.com/drive/folders/1cmmoOkP5tWD9skIAU5ClWRG_uagzUYVO?usp=sharing</a><br><br><br></p><h2 id=josh-brower>Josh Brower</h2><p>Josh wrote VQL artifacts that uses a sysmon configuration as a source to filter out known-good processes when running pslist() across Windows endpoints.</p><h3 id=references-4>References</h3><p>Context & Overview video: <a href=https://www.screencast.com/t/iLw4f2jL0FPu>https://www.screencast.com/t/iLw4f2jL0FPu</a></p><p>Code: <a href=https://gist.github.com/defensivedepth/09a6c91a593bdc62b63f2d40b1bc2f84>https://gist.github.com/defensivedepth/09a6c91a593bdc62b63f2d40b1bc2f84</a><br><br><br></p><h2 id=daniel-kelly>Daniel Kelly</h2><p>Daniel contributed a large number of useful artifacts providing
 collection capabilities for Windows and Linux focused around initial
-triage.</p><h3 id=references-5>References</h3><p><a href="https://drive.google.com/drive/folders/1Q3b4b1NN_xo5_2ak1-INn8l5kIBbfNZ2?usp=sharing">https://drive.google.com/drive/folders/1Q3b4b1NN_xo5_2ak1-INn8l5kIBbfNZ2?usp=sharing</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+triage.</p><h3 id=references-5>References</h3><p><a href="https://drive.google.com/drive/folders/1Q3b4b1NN_xo5_2ak1-INn8l5kIBbfNZ2?usp=sharing">https://drive.google.com/drive/folders/1Q3b4b1NN_xo5_2ak1-INn8l5kIBbfNZ2?usp=sharing</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-10-22-a-closer-look-at-the-winning-entry-in-the-2021-velociraptor-contributor-competition-575c387610af/index.html b/blog/2021/2021-10-22-a-closer-look-at-the-winning-entry-in-the-2021-velociraptor-contributor-competition-575c387610af/index.html
index 2bc77937349..ec969d0c1de 100644
--- a/blog/2021/2021-10-22-a-closer-look-at-the-winning-entry-in-the-2021-velociraptor-contributor-competition-575c387610af/index.html
+++ b/blog/2021/2021-10-22-a-closer-look-at-the-winning-entry-in-the-2021-velociraptor-contributor-competition-575c387610af/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="We take a look under the hood of the Grand Prize Winner
 "><link rel=icon href=/images/favicon.png type=image/png><title>A Closer Look at the Winning Entry in the 2021 Velociraptor Contributor Competition :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-10-22-a-closer-look-at-the-winning-entry-in-the-2021-velociraptor-contributor-competition-575c387610af/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-10-22-a-closer-look-at-the-winning-entry-in-the-2021-velociraptor-contributor-competition-575c387610af/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -78,4 +78,4 @@
 </code></pre><p>The result should looks something like this:</p><p><img src=0mVKrLKiDNo2goSmo.png alt></p><ol start=2><li>Then run the demo artifact which will:<ul><li>install the other artifacts</li><li>download the tools to your server’s inventory, and</li><li>load the server monitoring artifacts.</li></ul></li></ol><p>Run this VQL this in a Velociraptor notebook to run the artifact (be aware that this one may take a minute or two because it downloads the tool binaries to your server):</p><pre><code class=language-vql>SELECT * from Artifact.Temp.Setup.Demo()
 </code></pre><p>The result should looks something like this (and the red text does not mean anything went wrong — it’s just logging information… in red 🤷):</p><p><img src=0WTDSXnbi3EEJwsFy.png alt></p><p>After it completes you can check that all the tools are loaded into the inventory by running this VQL query in a notebook:</p><pre><code class=language-vql>SELECT * FROM inventory() WHERE name =~ 'gene' OR name =~ 'capa'
 </code></pre><p>The tools in this repo are all the latest release versions from the author’s repositories. I have just unzipped and renamed them for convenience, but they can be downloaded from the original repos if you’re paranoid:</p><ul><li><p>GENE binaries: <a href=https://github.com/0xrawsec/gene>https://github.com/0xrawsec/gene</a></p></li><li><p>GENE rules: <a href=https://github.com/0xrawsec/gene-rules/blob/master/compiled.gen>https://github.com/0xrawsec/gene-rules/blob/master/compiled.gen</a></p></li><li><p><code>CAPA</code> binaries: <a href=https://github.com/fireeye/capa>https://github.com/fireeye/capa</a></p></li></ul><div class="mynotices tip"><div heading=tip><p>For testing purposes you can also download some evtx files from <a href=https://github.com/sans-blue-team/DeepBlueCLI>here</a> which contain events from simulated malicious activity.</p></div></div><p>Now we’re ready to go!
-<em>Поехали!</em></p><h2 id=step-1-locate-interesting-files-based-on-file-magics-using-yara>Step 1: Locate interesting files based on file magics (using Yara)</h2><h3 id=artifact-customclientfindbymagicshttpsgithubcompredictiplevelociraptorcompetitionblobmainartifactscustomclientfindbymagicsyaml>Artifact: <a href=https://github.com/predictiple/VelociraptorCompetition/blob/main/artifacts/Custom.Client.FindByMagics.yaml>Custom.Client.FindByMagics</a></h3><p><img src=0T3ni2VWXKla2p4mN.png alt></p><p>Our first adventure is locating files of interest without explicitly telling Velociraptor their locations or file names.</p><p>Sure we know that evtx files are supposed to all be in <code>C:\Windows\System32\winevt\logs</code>, but imagine a scenario that a server admin may have diligently saved some evtx files to his desktop while troubleshooting some unrelated issue 2 weeks ago, long before anyone even suspected that the server was compromised. Upon investigating you find that the server’s logs retain only about 2 days worth of events, making those saved logs on the admin’s desktop <em>extremely valuable!</em> Of course <em>you wouldn’t know</em> that the admin fortuitously did that and <em>he may not know</em> that there’s a security incident going on or that you even exist! So finding evidence in unexpected places can be pretty important. In this hypothetical scenario we could find these unexpected files using the fact that Windows evtx files have a known file magic: ElfFile. Such file magics (signatures) can easily be identified using Velociraptor&rsquo;s built-in Yara plugin and we&rsquo;ll use that fact in this demonstration.</p><p>For other files where the file magic is insufficient to identify the exact type of data — for example text logs which are all text and don’t have any file magic (although there are indirect ways to solve that problem) — we can do a deeper dive into the file content using additional Yara scans as another layer in the identification process, and thus resolve ambiguous file types into specific data types. In this way we can resolve more than just basic file magics: we can extend the concept to a more precise level of resolution which we can call “data types”. For example, we can disambiguate text logs into the specific data types of “Apache access log” vs. “Apache error log” vs. “Windows Defender log” using deeper levels of inspection. And we can do this without needing to know their file paths or file names! Awesome!</p><p>But for the purpose of keeping this demonstration as concise as possible we will only be dealing with evtx and exe files which are reliably and unambiguously identifiable using just file magics. Extending the identification to data types is an exercise left to the reader 😃 (and yes, this could also be done quite well with Velociraptor’s amazing <a href=https://docs.velociraptor.app/vql_reference/parsers/#parse_binary>parse_binary</a> function)</p><p>In addition to freeing us up from the annoying dependency on path specifications, this approach also allows us to target files that have had their file extension changed or removed. As mentioned previously, having our targeting done independent of file paths and/or file names allows us to deal with the “offline data” use case more easily. And as a bonus it also makes things relatively platform-independent.</p><div class="mynotices note"><div heading=note><p>More fancy filtering could be implemented but we’re trying to keep it simple. The goal of this artifact is to identify relevant files and report back with their path. Subsequent artifacts could apply additional targeting logic based on things like timestamps or file content for example. In this case we are going to do more in-depth analysis with <a href=https://github.com/0xrawsec/gene>GENE</a> and <a href=https://github.com/fireeye/capa><code>CAPA</code></a> and use these tools to identify a subset of files that are more significant than the rest.</p></div></div><p><img src=0KpOIdK2H4TRVxqQY.png alt></p><p>We have embedded the 2 Yara rules inside the artifact parameters, however if we needed to use a more extensive list of Yara rules then would be impractical to put them inside the artifact definition. In that situation there are several alternatives:</p><ol><li><p>store the rules in a separate file that could be added to the Velociraptor tool inventory and treated as a non-executable tool.</p></li><li><p>host a rules file on a web server and retrieve it on the client using the <code>http_client()</code> function.</p></li><li><p>store the rules in a dedicated artifact and export it using the <a href=https://github.com/Velocidex/velociraptor/pull/1087>export/imports</a> feature. <strong>This approach apparently doesn’t work when the exports section is in an artifact which is being called from another artifact using the Artifacts plugin, so it would not work if we called Custom.Client.FindByMagics from System.VFS.DownloadFile via the VFS browser GUI. I should probably log an issue about that&mldr;</strong> <em>(note: this is fixed in <a href=https://github.com/Velocidex/velociraptor/pull/1299>#1299</a>, so it will be possible to do it this way starting from v0.6.2)</em> Anyway for that reason we have just kept it simple and embedded the 2 rules as an artifact parameter.</p></li></ol><h2 id=step-2-have-velociraptor-server-decide-what-the-client-should-do-next>Step 2: Have Velociraptor server decide what the client should do next</h2><h3 id=artifact-customserverdispatchtriagehttpsgithubcompredictiplevelociraptorcompetitionblobmainartifactscustomserverdispatchtriageyaml>Artifact: <a href=https://github.com/predictiple/VelociraptorCompetition/blob/main/artifacts/Custom.Server.DispatchTriage.yaml><code>Custom.Server.DispatchTriage</code></a></h3><p><img src=0udXI_u4F2ICHqTpw.png alt></p><p>The purpose of this artifact is to pair the files found by the FindByMagics artifact with the appropriate next step, i.e. the next artifact that needs to take action on the file. It’s essentially a patchboard between incoming file magic types and outgoing Velociraptor artifacts.</p><p><img src=0CXp9HmOZ468aSyHI.png alt></p><p>This artifact runs as a server-side monitoring artifact and listens for flow completions of our FindByMagics artifact. It retrieves the monitored artifact&rsquo;s results and pairs each result with a follow-up artifact. It then dispatches the follow-up artifact to the client using the <code>client_collect()</code> VQL function. To avoid dispatching a new client flow for every input file it compiles the list of target files into a list (for each type and accessor) and then dispatches a single artifact and passes the list and accessor to the artifact.</p><p><img src=0XXPJV8BuU0Kz6_xT.png alt></p><p>In order to achieve deduplication of the list of targets we have used Velociraptor’s <code>starl()</code> function which allows us to define a simple deduplicate function using Python code:</p><p><img src=0HXqgoqyoIzZKbE4j.png alt></p><p><a href=https://github.com/google/starlark-go>Starlark</a> is a dialect of Python. We’ve used it here because Velociraptor doesn’t currently have a function to deduplicate a list of values. So we’ve just given VQL a new capability, and it’s very cool to be able to that “on the fly” through the <code>starl()</code> function.</p><p>To make things configurable we have used artifact parameters for the list of monitored artifacts as well as for the item-level input->output pairing (“Response Mapping”). So you can add or remove monitored artifacts very easily without changing the artifact’s code.</p><p>You can also set up your own mappings of file magics -> response artifacts. One MagidID value can map to more than 1 dispatched artifact (one-to-many), so it is possible to have 2 or more types of analysis (via their own independent artifacts) run in response to a particular file type being identified. It’s also possible to have multiple MagicID values map to the same dispatched artifact (many-to-one), for example if the dispatched artifact performed some format-independent function such as uploading the target files to the server.</p><h2 id=step-3-send-new-orders-to-the-client>Step 3: Send new orders to the client</h2><h3 id=artifact-customclienttriagegenehttpsgithubcompredictiplevelociraptorcompetitionblobmainartifactscustomclienttriagegeneyaml>Artifact: <a href=https://github.com/predictiple/VelociraptorCompetition/blob/main/artifacts/Custom.Client.TriageGene.yaml><code>Custom.Client.TriageGene</code></a></h3><h3 id=artifact-customclienttriagecapahttpsgithubcompredictiplevelociraptorcompetitionblobmainartifactscustomclienttriagecapayaml>Artifact: <a href=https://github.com/predictiple/VelociraptorCompetition/blob/main/artifacts/Custom.Client.TriageCapa.yaml><code>Custom.Client.TriageCapa</code></a></h3><p>These artifacts are probably not as good as they could be, but their main purpose is to illustrate that more in-depth analysis can be scheduled on a client based on the results of a previously run artifact. This process can be iterative and involve branching logic.</p><p>The key things to notice about these artifacts are:</p><ol><li><p>They are multi-platform. So they can be run on the 3 main operating systems without OS-specific targeting. They can also work on “offline” data, where files from 1 operating system are being processed on a different operating system.</p></li><li><p>The tool definitions (“tools” section of the artifact) are as simple as possible because we’ve already defined and initialised (incl. downloading) the tools during the setup process. The tool definitions here are just to ensure that these tools are available to this artifact.</p></li><li><p>We don’t mess around with fancy-pants unzipping of tools in our artifact. Several of the Velociraptor-bundled artifacts download zipped tools from Github and then unzip them on the client. This is done for user-convenience but it creates unnecessary complexity in the artifact, plus we really shouldn’t be using tools in zips that have been pulled straight from Github. It’s better to download the tools, unzip the tools, test/validate the tools, and then store them in your Velociraptor’s inventory. This approach also means that your endpoints don’t need access to Github because all the tools will be pulled from the Velociraptor server.</p></li><li><p>We set the artifact parameters to “hidden” because we don’t intend these artifacts to be used standalone.</p></li><li><p>We give them a generous timeout because we could be targeting a large set of files that were previously collected and are now being analysed “offline”. Also <code>Capa</code> is written in Python and slow as molasses.</p></li></ol><div class="mynotices note"><div heading=note><p>Windows Defender will probably prevent <code>Capa</code> from running. You may need to temporarily disable it’s realtime protection option or else add a realtime scanning exclusion for the folder your testing on.</p></div></div><h2 id=step-4-have-velociraptor-server-decide-what-the-client-should-do-next>Step 4: Have Velociraptor server decide what the client should do next</h2><h3 id=artifact-customserverdispatchuploadhttpsgithubcompredictiplevelociraptorcompetitionblobmainartifactscustomserverdispatchuploadyaml>Artifact: <a href=https://github.com/predictiple/VelociraptorCompetition/blob/main/artifacts/Custom.Server.DispatchUpload.yaml><code>Custom.Server.DispatchUpload</code></a></h3><p>The triaging artifacts in the previous step have now looked at the target files in more depth and given some sort of risk-rating or assessment based on the information in (or about) each file.</p><p>Similarly to Step 2, the server can now collate that information and conditionally dispatch another artifact to the client. The artifact is almost identical to the one described in Step 2 other than for the fact that it’s now using criticality_score in the decision process instead of magic_id.</p><p><img src=0MeJqIkpWMmr0fjtY.png alt></p><p>The client artifact we will dispatch here is <code>Custom.Server.DispatchUpload</code>, which is described in the next step.</p><h2 id=step-5-send-new-orders-to-the-client>Step 5: Send new orders to the client</h2><h3 id=artifact-customclienttriageuploadhttpsgithubcompredictiplevelociraptorcompetitionblobmainartifactscustomclienttriageuploadyaml>Artifact: <a href=https://github.com/predictiple/VelociraptorCompetition/blob/main/artifacts/Custom.Client.TriageUpload.yaml><code>Custom.Client.TriageUpload</code></a></h3><p>This artifact is a simple one that just uploads the files identified by the previous steps as containing relevant information.</p><p>In other words, what we have accomplished is the <strong>preservation of evidence based on the actual evidence contained within the files themselves</strong>. This is a better approach than just uploading everything and <em>then</em> checking to see what the files contain.</p><h2 id=step-x-bonus-points-hijacking-the-vfs-browser-upload-function>Step X: Bonus points: Hijacking the VFS browser upload function</h2><h3 id=artifact-systemvfsdownloadfilehttpsgithubcompredictiplevelociraptorcompetitionblobmainartifactssystemvfsdownloadfileyaml>Artifact: <a href=https://github.com/predictiple/VelociraptorCompetition/blob/main/artifacts/System.VFS.DownloadFile.yaml>System.VFS.DownloadFile</a></h3><p><img src=0AjvQfNC5jIycbk5N.png alt></p><p>Under the hood Velociraptor itself uses many artifacts that contain VQL for performing various functions, including many of the functions exposed via the Velociraptor GUI. The VFS (Virtual File System) browser in the GUI has an associated artifact named System.VFS.DownloadFile (<a href=https://github.com/Velocidex/velociraptor/blob/54d878fd57a9250b44965429750a4d20e7850b3e/artifacts/definitions/System/VFS/DownloadFile.yaml>https://github.com/Velocidex/velociraptor/blob/54d878fd57a9250b44965429750a4d20e7850b3e/artifacts/definitions/System/VFS/DownloadFile.yaml</a>)</p><p>This artifact provides 2 functions which are invoked by 2 buttons in the VFS GUI:</p><ul><li><p>“download_one_file”</p></li><li><p>“download_recursive”</p></li></ul><p>We would like to be able to browse around on the client machine and when we find an interesting folder we want to be able to click a button and let Velociraptor do the rest! To do that we are going to have to hijack one of those buttons. The “Download Recursive” button and corresponding VQL artifact’s function seems to be the best match for our purposes since we want to target a folder and do stuff recursively with the files in that folder.</p><div class="mynotices note"><div heading=note><p>It sucks that we need to hijack a built-in “system” artifact to do this, and we feel really bad about doing it (well not really), but at present there are no “custom function” buttons available in the VFS browser GUI. So for now we do this with full knowledge that it is frowned upon and that we are subverting functionality which may be needed for other purposes.</p></div></div><p><img src=0EkAQm0IkMK23HT1I.png alt></p><p>In the System.VFS.DownloadFile artifact we&rsquo;ve replaced the download_recursive function with our own one that runs our Custom.Client.FindByMagics artifact and pass the parameters Path and Accessor to it. With that minimal information the FindByMagics artifact can begin it&rsquo;s work. Thus we have replaced the native function and by extension we have hijacked the &ldquo;Download Recursive&rdquo; button in the VFS browser. Neat!</p><p><img src=0umZkoPpBx_LFI-9W.png alt></p><p>We also added the 1-hour timeout into the artifact so that it’s behaviour is consistent with the timeout of the Custom.Client.FindByMagics artifact. Finding files can take a long time, so this is just to avoid frustrating timeouts - however it should rarely take anything as long as an hour.</p><p><img src=0_Sg3JaXOEeWZJCE2.png alt></p><p><img src=0xXQllV14weMpItFW.png alt></p><h2 id=lets-see-it-all-in-action>Let’s see it all in action!</h2><p>Starting from the Custom.Client.FindByMagics artifact:</p><p><img src=0P7T09VWmEbhqsG60.gif alt></p><p>Starting from the VFS browser:</p><p><img src=0jRHjFoyYXAAtoPRy.gif alt></p><p>(p.s. sorry my gif recording software caught some jitter)</p><h2 id=conclusion>Conclusion</h2><p>So what we have here is a set of artifacts that work together to implement a simple workflow. We run a single artifact and all we give it is a filesystem path where it should start looking for stuff. With the VFS browser hack we can even simplify that a bit more and reduce it to just browsing around and clicking a button. We can even browse around the Volume Shadow Copies and target these and other sneaky hidden files. Velociraptor then finds relevant stuff and decides what to do with that stuff.</p><p>Although this is a simplified example the concepts can be applied to much more creative artifacts in order to produce quite complex workflows. We hope you’ll find this useful and apply your own creativity in creating cleverer workflows that do super-awesome things!</p><p>Have fun guys!!!</p><p>What do you think of Justin’s submission? Drop your comments, thoughts and questions into the Discord server or by tweeting @velocidex and keep the conversation going!</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<em>Поехали!</em></p><h2 id=step-1-locate-interesting-files-based-on-file-magics-using-yara>Step 1: Locate interesting files based on file magics (using Yara)</h2><h3 id=artifact-customclientfindbymagicshttpsgithubcompredictiplevelociraptorcompetitionblobmainartifactscustomclientfindbymagicsyaml>Artifact: <a href=https://github.com/predictiple/VelociraptorCompetition/blob/main/artifacts/Custom.Client.FindByMagics.yaml>Custom.Client.FindByMagics</a></h3><p><img src=0T3ni2VWXKla2p4mN.png alt></p><p>Our first adventure is locating files of interest without explicitly telling Velociraptor their locations or file names.</p><p>Sure we know that evtx files are supposed to all be in <code>C:\Windows\System32\winevt\logs</code>, but imagine a scenario that a server admin may have diligently saved some evtx files to his desktop while troubleshooting some unrelated issue 2 weeks ago, long before anyone even suspected that the server was compromised. Upon investigating you find that the server’s logs retain only about 2 days worth of events, making those saved logs on the admin’s desktop <em>extremely valuable!</em> Of course <em>you wouldn’t know</em> that the admin fortuitously did that and <em>he may not know</em> that there’s a security incident going on or that you even exist! So finding evidence in unexpected places can be pretty important. In this hypothetical scenario we could find these unexpected files using the fact that Windows evtx files have a known file magic: ElfFile. Such file magics (signatures) can easily be identified using Velociraptor&rsquo;s built-in Yara plugin and we&rsquo;ll use that fact in this demonstration.</p><p>For other files where the file magic is insufficient to identify the exact type of data — for example text logs which are all text and don’t have any file magic (although there are indirect ways to solve that problem) — we can do a deeper dive into the file content using additional Yara scans as another layer in the identification process, and thus resolve ambiguous file types into specific data types. In this way we can resolve more than just basic file magics: we can extend the concept to a more precise level of resolution which we can call “data types”. For example, we can disambiguate text logs into the specific data types of “Apache access log” vs. “Apache error log” vs. “Windows Defender log” using deeper levels of inspection. And we can do this without needing to know their file paths or file names! Awesome!</p><p>But for the purpose of keeping this demonstration as concise as possible we will only be dealing with evtx and exe files which are reliably and unambiguously identifiable using just file magics. Extending the identification to data types is an exercise left to the reader 😃 (and yes, this could also be done quite well with Velociraptor’s amazing <a href=https://docs.velociraptor.app/vql_reference/parsers/#parse_binary>parse_binary</a> function)</p><p>In addition to freeing us up from the annoying dependency on path specifications, this approach also allows us to target files that have had their file extension changed or removed. As mentioned previously, having our targeting done independent of file paths and/or file names allows us to deal with the “offline data” use case more easily. And as a bonus it also makes things relatively platform-independent.</p><div class="mynotices note"><div heading=note><p>More fancy filtering could be implemented but we’re trying to keep it simple. The goal of this artifact is to identify relevant files and report back with their path. Subsequent artifacts could apply additional targeting logic based on things like timestamps or file content for example. In this case we are going to do more in-depth analysis with <a href=https://github.com/0xrawsec/gene>GENE</a> and <a href=https://github.com/fireeye/capa><code>CAPA</code></a> and use these tools to identify a subset of files that are more significant than the rest.</p></div></div><p><img src=0KpOIdK2H4TRVxqQY.png alt></p><p>We have embedded the 2 Yara rules inside the artifact parameters, however if we needed to use a more extensive list of Yara rules then would be impractical to put them inside the artifact definition. In that situation there are several alternatives:</p><ol><li><p>store the rules in a separate file that could be added to the Velociraptor tool inventory and treated as a non-executable tool.</p></li><li><p>host a rules file on a web server and retrieve it on the client using the <code>http_client()</code> function.</p></li><li><p>store the rules in a dedicated artifact and export it using the <a href=https://github.com/Velocidex/velociraptor/pull/1087>export/imports</a> feature. <strong>This approach apparently doesn’t work when the exports section is in an artifact which is being called from another artifact using the Artifacts plugin, so it would not work if we called Custom.Client.FindByMagics from System.VFS.DownloadFile via the VFS browser GUI. I should probably log an issue about that&mldr;</strong> <em>(note: this is fixed in <a href=https://github.com/Velocidex/velociraptor/pull/1299>#1299</a>, so it will be possible to do it this way starting from v0.6.2)</em> Anyway for that reason we have just kept it simple and embedded the 2 rules as an artifact parameter.</p></li></ol><h2 id=step-2-have-velociraptor-server-decide-what-the-client-should-do-next>Step 2: Have Velociraptor server decide what the client should do next</h2><h3 id=artifact-customserverdispatchtriagehttpsgithubcompredictiplevelociraptorcompetitionblobmainartifactscustomserverdispatchtriageyaml>Artifact: <a href=https://github.com/predictiple/VelociraptorCompetition/blob/main/artifacts/Custom.Server.DispatchTriage.yaml><code>Custom.Server.DispatchTriage</code></a></h3><p><img src=0udXI_u4F2ICHqTpw.png alt></p><p>The purpose of this artifact is to pair the files found by the FindByMagics artifact with the appropriate next step, i.e. the next artifact that needs to take action on the file. It’s essentially a patchboard between incoming file magic types and outgoing Velociraptor artifacts.</p><p><img src=0CXp9HmOZ468aSyHI.png alt></p><p>This artifact runs as a server-side monitoring artifact and listens for flow completions of our FindByMagics artifact. It retrieves the monitored artifact&rsquo;s results and pairs each result with a follow-up artifact. It then dispatches the follow-up artifact to the client using the <code>client_collect()</code> VQL function. To avoid dispatching a new client flow for every input file it compiles the list of target files into a list (for each type and accessor) and then dispatches a single artifact and passes the list and accessor to the artifact.</p><p><img src=0XXPJV8BuU0Kz6_xT.png alt></p><p>In order to achieve deduplication of the list of targets we have used Velociraptor’s <code>starl()</code> function which allows us to define a simple deduplicate function using Python code:</p><p><img src=0HXqgoqyoIzZKbE4j.png alt></p><p><a href=https://github.com/google/starlark-go>Starlark</a> is a dialect of Python. We’ve used it here because Velociraptor doesn’t currently have a function to deduplicate a list of values. So we’ve just given VQL a new capability, and it’s very cool to be able to that “on the fly” through the <code>starl()</code> function.</p><p>To make things configurable we have used artifact parameters for the list of monitored artifacts as well as for the item-level input->output pairing (“Response Mapping”). So you can add or remove monitored artifacts very easily without changing the artifact’s code.</p><p>You can also set up your own mappings of file magics -> response artifacts. One MagidID value can map to more than 1 dispatched artifact (one-to-many), so it is possible to have 2 or more types of analysis (via their own independent artifacts) run in response to a particular file type being identified. It’s also possible to have multiple MagicID values map to the same dispatched artifact (many-to-one), for example if the dispatched artifact performed some format-independent function such as uploading the target files to the server.</p><h2 id=step-3-send-new-orders-to-the-client>Step 3: Send new orders to the client</h2><h3 id=artifact-customclienttriagegenehttpsgithubcompredictiplevelociraptorcompetitionblobmainartifactscustomclienttriagegeneyaml>Artifact: <a href=https://github.com/predictiple/VelociraptorCompetition/blob/main/artifacts/Custom.Client.TriageGene.yaml><code>Custom.Client.TriageGene</code></a></h3><h3 id=artifact-customclienttriagecapahttpsgithubcompredictiplevelociraptorcompetitionblobmainartifactscustomclienttriagecapayaml>Artifact: <a href=https://github.com/predictiple/VelociraptorCompetition/blob/main/artifacts/Custom.Client.TriageCapa.yaml><code>Custom.Client.TriageCapa</code></a></h3><p>These artifacts are probably not as good as they could be, but their main purpose is to illustrate that more in-depth analysis can be scheduled on a client based on the results of a previously run artifact. This process can be iterative and involve branching logic.</p><p>The key things to notice about these artifacts are:</p><ol><li><p>They are multi-platform. So they can be run on the 3 main operating systems without OS-specific targeting. They can also work on “offline” data, where files from 1 operating system are being processed on a different operating system.</p></li><li><p>The tool definitions (“tools” section of the artifact) are as simple as possible because we’ve already defined and initialised (incl. downloading) the tools during the setup process. The tool definitions here are just to ensure that these tools are available to this artifact.</p></li><li><p>We don’t mess around with fancy-pants unzipping of tools in our artifact. Several of the Velociraptor-bundled artifacts download zipped tools from Github and then unzip them on the client. This is done for user-convenience but it creates unnecessary complexity in the artifact, plus we really shouldn’t be using tools in zips that have been pulled straight from Github. It’s better to download the tools, unzip the tools, test/validate the tools, and then store them in your Velociraptor’s inventory. This approach also means that your endpoints don’t need access to Github because all the tools will be pulled from the Velociraptor server.</p></li><li><p>We set the artifact parameters to “hidden” because we don’t intend these artifacts to be used standalone.</p></li><li><p>We give them a generous timeout because we could be targeting a large set of files that were previously collected and are now being analysed “offline”. Also <code>Capa</code> is written in Python and slow as molasses.</p></li></ol><div class="mynotices note"><div heading=note><p>Windows Defender will probably prevent <code>Capa</code> from running. You may need to temporarily disable it’s realtime protection option or else add a realtime scanning exclusion for the folder your testing on.</p></div></div><h2 id=step-4-have-velociraptor-server-decide-what-the-client-should-do-next>Step 4: Have Velociraptor server decide what the client should do next</h2><h3 id=artifact-customserverdispatchuploadhttpsgithubcompredictiplevelociraptorcompetitionblobmainartifactscustomserverdispatchuploadyaml>Artifact: <a href=https://github.com/predictiple/VelociraptorCompetition/blob/main/artifacts/Custom.Server.DispatchUpload.yaml><code>Custom.Server.DispatchUpload</code></a></h3><p>The triaging artifacts in the previous step have now looked at the target files in more depth and given some sort of risk-rating or assessment based on the information in (or about) each file.</p><p>Similarly to Step 2, the server can now collate that information and conditionally dispatch another artifact to the client. The artifact is almost identical to the one described in Step 2 other than for the fact that it’s now using criticality_score in the decision process instead of magic_id.</p><p><img src=0MeJqIkpWMmr0fjtY.png alt></p><p>The client artifact we will dispatch here is <code>Custom.Server.DispatchUpload</code>, which is described in the next step.</p><h2 id=step-5-send-new-orders-to-the-client>Step 5: Send new orders to the client</h2><h3 id=artifact-customclienttriageuploadhttpsgithubcompredictiplevelociraptorcompetitionblobmainartifactscustomclienttriageuploadyaml>Artifact: <a href=https://github.com/predictiple/VelociraptorCompetition/blob/main/artifacts/Custom.Client.TriageUpload.yaml><code>Custom.Client.TriageUpload</code></a></h3><p>This artifact is a simple one that just uploads the files identified by the previous steps as containing relevant information.</p><p>In other words, what we have accomplished is the <strong>preservation of evidence based on the actual evidence contained within the files themselves</strong>. This is a better approach than just uploading everything and <em>then</em> checking to see what the files contain.</p><h2 id=step-x-bonus-points-hijacking-the-vfs-browser-upload-function>Step X: Bonus points: Hijacking the VFS browser upload function</h2><h3 id=artifact-systemvfsdownloadfilehttpsgithubcompredictiplevelociraptorcompetitionblobmainartifactssystemvfsdownloadfileyaml>Artifact: <a href=https://github.com/predictiple/VelociraptorCompetition/blob/main/artifacts/System.VFS.DownloadFile.yaml>System.VFS.DownloadFile</a></h3><p><img src=0AjvQfNC5jIycbk5N.png alt></p><p>Under the hood Velociraptor itself uses many artifacts that contain VQL for performing various functions, including many of the functions exposed via the Velociraptor GUI. The VFS (Virtual File System) browser in the GUI has an associated artifact named System.VFS.DownloadFile (<a href=https://github.com/Velocidex/velociraptor/blob/54d878fd57a9250b44965429750a4d20e7850b3e/artifacts/definitions/System/VFS/DownloadFile.yaml>https://github.com/Velocidex/velociraptor/blob/54d878fd57a9250b44965429750a4d20e7850b3e/artifacts/definitions/System/VFS/DownloadFile.yaml</a>)</p><p>This artifact provides 2 functions which are invoked by 2 buttons in the VFS GUI:</p><ul><li><p>“download_one_file”</p></li><li><p>“download_recursive”</p></li></ul><p>We would like to be able to browse around on the client machine and when we find an interesting folder we want to be able to click a button and let Velociraptor do the rest! To do that we are going to have to hijack one of those buttons. The “Download Recursive” button and corresponding VQL artifact’s function seems to be the best match for our purposes since we want to target a folder and do stuff recursively with the files in that folder.</p><div class="mynotices note"><div heading=note><p>It sucks that we need to hijack a built-in “system” artifact to do this, and we feel really bad about doing it (well not really), but at present there are no “custom function” buttons available in the VFS browser GUI. So for now we do this with full knowledge that it is frowned upon and that we are subverting functionality which may be needed for other purposes.</p></div></div><p><img src=0EkAQm0IkMK23HT1I.png alt></p><p>In the System.VFS.DownloadFile artifact we&rsquo;ve replaced the download_recursive function with our own one that runs our Custom.Client.FindByMagics artifact and pass the parameters Path and Accessor to it. With that minimal information the FindByMagics artifact can begin it&rsquo;s work. Thus we have replaced the native function and by extension we have hijacked the &ldquo;Download Recursive&rdquo; button in the VFS browser. Neat!</p><p><img src=0umZkoPpBx_LFI-9W.png alt></p><p>We also added the 1-hour timeout into the artifact so that it’s behaviour is consistent with the timeout of the Custom.Client.FindByMagics artifact. Finding files can take a long time, so this is just to avoid frustrating timeouts - however it should rarely take anything as long as an hour.</p><p><img src=0_Sg3JaXOEeWZJCE2.png alt></p><p><img src=0xXQllV14weMpItFW.png alt></p><h2 id=lets-see-it-all-in-action>Let’s see it all in action!</h2><p>Starting from the Custom.Client.FindByMagics artifact:</p><p><img src=0P7T09VWmEbhqsG60.gif alt></p><p>Starting from the VFS browser:</p><p><img src=0jRHjFoyYXAAtoPRy.gif alt></p><p>(p.s. sorry my gif recording software caught some jitter)</p><h2 id=conclusion>Conclusion</h2><p>So what we have here is a set of artifacts that work together to implement a simple workflow. We run a single artifact and all we give it is a filesystem path where it should start looking for stuff. With the VFS browser hack we can even simplify that a bit more and reduce it to just browsing around and clicking a button. We can even browse around the Volume Shadow Copies and target these and other sneaky hidden files. Velociraptor then finds relevant stuff and decides what to do with that stuff.</p><p>Although this is a simplified example the concepts can be applied to much more creative artifacts in order to produce quite complex workflows. We hope you’ll find this useful and apply your own creativity in creating cleverer workflows that do super-awesome things!</p><p>Have fun guys!!!</p><p>What do you think of Justin’s submission? Drop your comments, thoughts and questions into the Discord server or by tweeting @velocidex and keep the conversation going!</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-11-09-eql2vql/index.html b/blog/2021/2021-11-09-eql2vql/index.html
index ad724b4feca..1ebf1af2749 100644
--- a/blog/2021/2021-11-09-eql2vql/index.html
+++ b/blog/2021/2021-11-09-eql2vql/index.html
@@ -5,7 +5,7 @@
 able to apply these in different contexts, enhancing their overall
 effectiveness.
 "><link rel=icon href=/images/favicon.png type=image/png><title>EQL to VQL - Leverage EQL based detection rules in Velociraptor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-11-09-eql2vql/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-11-09-eql2vql/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -271,4 +271,4 @@
 source license. As always, please file issues on the bug tracker or
 ask questions on our mailing list
 <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a>. You can also chat with us
-directly on discord at <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+directly on discord at <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-11-09-vql-data-manipulation/index.html b/blog/2021/2021-11-09-vql-data-manipulation/index.html
index 8013d12ff0e..ac02fdcc905 100644
--- a/blog/2021/2021-11-09-vql-data-manipulation/index.html
+++ b/blog/2021/2021-11-09-vql-data-manipulation/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="This post walks through discovery of malicious files, then data manipulation and decode in VQL.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Cobalt Strike payload discovery and data manipulation in VQL :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-11-09-vql-data-manipulation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-11-09-vql-data-manipulation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -246,4 +246,4 @@
 <a href=https://github.com/Velocidex/velociraptor>GitHub</a> under an open source license. As
 always, please file issues on the bug tracker or ask questions on our mailing list
 <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a>. You can also chat with us directly on discord
-at <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>.</p><h2 id=references>References</h2><ol><li><a href=https://attack.mitre.org/techniques/T1127/001/>MITRE ATT&amp;CK T1127.001 - Trusted Developer Utilities Proxy Execution: MSBuild</a></li><li><a href=https://github.com/3gstudent/msbuild-inline-task>MSBuild Inline Task template</a></li><li><a href=https://www.virustotal.com/gui/file/cf54b9078d63eaeb0300e70d0ef6cf4d3a4d83842fe08cb951f841549663e1e2>VirusTotal sample - <code>I20xQy.TMP</code></a></li><li><a href=https://www.virustotal.com/gui/file/52ade62a412fed9425b75610620c85d9c143593cd50c2269066b120ac05dc8c3>VirusTotal sample - <code>CSLHP.TMP</code></a></li><li><a href=https://www.virustotal.com/gui/file/b4ede02ea3c198f5e7d3fbab3cadc1266538d23a43a2825ece7d4c75b7208fa9>VirusTotal sample - <code>ddppllkm.TMP</code></a></li><li><a href=https://www.virustotal.com/gui/file/152722a89fd87ecdf73fd18558622f22f980bddd6928cad31859453d41f7b8dd>VirusTotal sample - <code>gujf2z0z.0.cs.TMP</code></a></li><li><a href=https://www.virustotal.com/gui/file/78d2078c4e740aff4a2a289387ba8cfc1de6c02ed48c4c65b53582303192dab2>VirusTotal sample - <code>Ofeq81u.TMP</code></a></li><li><a href=https://www.virustotal.com/gui/file/507f988ab1f8229e84bb83dcb5a896b1747957b998aad7c7ccdd301096726999>VirusTotal sample - <code>zzyhukwK.TMP</code></a></li></ol><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+at <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>.</p><h2 id=references>References</h2><ol><li><a href=https://attack.mitre.org/techniques/T1127/001/>MITRE ATT&amp;CK T1127.001 - Trusted Developer Utilities Proxy Execution: MSBuild</a></li><li><a href=https://github.com/3gstudent/msbuild-inline-task>MSBuild Inline Task template</a></li><li><a href=https://www.virustotal.com/gui/file/cf54b9078d63eaeb0300e70d0ef6cf4d3a4d83842fe08cb951f841549663e1e2>VirusTotal sample - <code>I20xQy.TMP</code></a></li><li><a href=https://www.virustotal.com/gui/file/52ade62a412fed9425b75610620c85d9c143593cd50c2269066b120ac05dc8c3>VirusTotal sample - <code>CSLHP.TMP</code></a></li><li><a href=https://www.virustotal.com/gui/file/b4ede02ea3c198f5e7d3fbab3cadc1266538d23a43a2825ece7d4c75b7208fa9>VirusTotal sample - <code>ddppllkm.TMP</code></a></li><li><a href=https://www.virustotal.com/gui/file/152722a89fd87ecdf73fd18558622f22f980bddd6928cad31859453d41f7b8dd>VirusTotal sample - <code>gujf2z0z.0.cs.TMP</code></a></li><li><a href=https://www.virustotal.com/gui/file/78d2078c4e740aff4a2a289387ba8cfc1de6c02ed48c4c65b53582303192dab2>VirusTotal sample - <code>Ofeq81u.TMP</code></a></li><li><a href=https://www.virustotal.com/gui/file/507f988ab1f8229e84bb83dcb5a896b1747957b998aad7c7ccdd301096726999>VirusTotal sample - <code>zzyhukwK.TMP</code></a></li></ol><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/2021-12-11-sftp-in-aws/index.html b/blog/2021/2021-12-11-sftp-in-aws/index.html
index 8513b32221c..108a23a5f0d 100644
--- a/blog/2021/2021-12-11-sftp-in-aws/index.html
+++ b/blog/2021/2021-12-11-sftp-in-aws/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Velociraptor can use sftp to securely transfer data to an AWS S3 bucket. However configuring this service securely is not trivial. This post walks the reader through the steps of setting up a secure sftp upload only bucket that can be used with Velociraptor.
 "><link rel=icon href=/images/favicon.png type=image/png><title>SFTP in AWS :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-12-11-sftp-in-aws/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/2021-12-11-sftp-in-aws/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -210,4 +210,4 @@
 <code>upload_sftp()</code> plugin <a href=/vql_reference/basic/#upload_sftp>documented here</a>. This means that you can use
 this functionality in any VQL query at all - either on the client side
 or on the server side.</p><p>For example it is possible to automatically back up server side hunts
-or collections to the SFTP bucket.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+or collections to the SFTP bucket.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2021/index.html b/blog/2021/index.html
index bc4b7c4c3ba..1f0d4749e02 100644
--- a/blog/2021/index.html
+++ b/blog/2021/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>2021 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2021/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=top-github-link><a class=github-link title='Edit this page' href=https://github.com/Velocidex/velociraptor-docs/edit/master/content/blog/2021/_index.md target=blank><i class="fas fa-code-branch"></i>
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>2021</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>2021</h1><ul class="children children-div"><div><a href=/blog/2021/2021-01-19-parsing-binary-files-d31114a41f14/>Parsing binary files</a></div><div><a href=/blog/2021/2021-01-22-concurrent-vql-6d381fdb0b1f/>Concurrent VQL</a></div><div><a href=/blog/2021/2021-01-29-disabled-event-log-files-a3529a08adbe/>Disabled Event Log files</a></div><div><a href=/blog/2021/2021-02-02-detecting-dll-hijacking-with-vql-e9a735354257/>Detecting DLL Hijacking With VQL</a></div><div><a href=/blog/2021/2021-02-03-migrating-from-osquery-to-velociraptor-d4143799953f/>Migrating from OSQuery to Velociraptor</a></div><div><a href=/blog/2021/2021-02-13-digging-for-files-with-velociraptor-a1c0a21e242b/>Digging for files with Velociraptor</a></div><div><a href=/blog/2021/2021-04-16-digging-into-process-memory-33c60a640cdb/>Digging into process memory</a></div><div><a href=/blog/2021/2021-04-21-the-next-phase-of-velociraptor-bf696c2c3491/>The Next Phase of Velociraptor</a></div><div><a href=/blog/2021/2021-04-29-scaling-velociraptor-57acc4df76ed/>Scaling Velociraptor</a></div><div><a href=/blog/2021/2021-06-09-verifying-executables-on-windows-1b3518122d3c/>Verifying executables on Windows</a></div><div><a href=/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/>Carving $USN journal entries</a></div><div><a href=/blog/2021/2021-07-12-velociraptor-vs-printnightmare/>Velociraptor vs Printnightmare</a></div><div><a href=/blog/2021/2021-08-18-velociraptor-and-etw/>Event Tracing for Windows Part 1</a></div><div><a href=/blog/2021/2021-09-03-process-spoofing/>ETW Part 2: Process Parent Spoofing</a></div><div><a href=/blog/2021/2021-09-07-release-notes-0.6.1/>Velociraptor 0.6.1 Release</a></div><div><a href=/blog/2021/2021-09-17-carlos-intro/>Welcome to Velociraptor, Carlos</a></div><div><a href=/blog/2021/2021-10-08-contributor-contest/>The 2021 Contributor Contest</a></div><div><a href=/blog/2021/2021-10-22-a-closer-look-at-the-winning-entry-in-the-2021-velociraptor-contributor-competition-575c387610af/>A Closer Look at the Winning Entry in the 2021 Velociraptor Contributor Competition</a></div><div><a href=/blog/2021/2021-11-09-eql2vql/>EQL to VQL - Leverage EQL based detection rules in Velociraptor</a></div><div><a href=/blog/2021/2021-11-09-vql-data-manipulation/>Cobalt Strike payload discovery and data manipulation in VQL</a></div><div><a href=/blog/2021/2021-12-11-sftp-in-aws/>SFTP in AWS</a></div></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<span class=links>2021</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>2021</h1><ul class="children children-div"><div><a href=/blog/2021/2021-01-19-parsing-binary-files-d31114a41f14/>Parsing binary files</a></div><div><a href=/blog/2021/2021-01-22-concurrent-vql-6d381fdb0b1f/>Concurrent VQL</a></div><div><a href=/blog/2021/2021-01-29-disabled-event-log-files-a3529a08adbe/>Disabled Event Log files</a></div><div><a href=/blog/2021/2021-02-02-detecting-dll-hijacking-with-vql-e9a735354257/>Detecting DLL Hijacking With VQL</a></div><div><a href=/blog/2021/2021-02-03-migrating-from-osquery-to-velociraptor-d4143799953f/>Migrating from OSQuery to Velociraptor</a></div><div><a href=/blog/2021/2021-02-13-digging-for-files-with-velociraptor-a1c0a21e242b/>Digging for files with Velociraptor</a></div><div><a href=/blog/2021/2021-04-16-digging-into-process-memory-33c60a640cdb/>Digging into process memory</a></div><div><a href=/blog/2021/2021-04-21-the-next-phase-of-velociraptor-bf696c2c3491/>The Next Phase of Velociraptor</a></div><div><a href=/blog/2021/2021-04-29-scaling-velociraptor-57acc4df76ed/>Scaling Velociraptor</a></div><div><a href=/blog/2021/2021-06-09-verifying-executables-on-windows-1b3518122d3c/>Verifying executables on Windows</a></div><div><a href=/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/>Carving $USN journal entries</a></div><div><a href=/blog/2021/2021-07-12-velociraptor-vs-printnightmare/>Velociraptor vs Printnightmare</a></div><div><a href=/blog/2021/2021-08-18-velociraptor-and-etw/>Event Tracing for Windows Part 1</a></div><div><a href=/blog/2021/2021-09-03-process-spoofing/>ETW Part 2: Process Parent Spoofing</a></div><div><a href=/blog/2021/2021-09-07-release-notes-0.6.1/>Velociraptor 0.6.1 Release</a></div><div><a href=/blog/2021/2021-09-17-carlos-intro/>Welcome to Velociraptor, Carlos</a></div><div><a href=/blog/2021/2021-10-08-contributor-contest/>The 2021 Contributor Contest</a></div><div><a href=/blog/2021/2021-10-22-a-closer-look-at-the-winning-entry-in-the-2021-velociraptor-contributor-competition-575c387610af/>A Closer Look at the Winning Entry in the 2021 Velociraptor Contributor Competition</a></div><div><a href=/blog/2021/2021-11-09-eql2vql/>EQL to VQL - Leverage EQL based detection rules in Velociraptor</a></div><div><a href=/blog/2021/2021-11-09-vql-data-manipulation/>Cobalt Strike payload discovery and data manipulation in VQL</a></div><div><a href=/blog/2021/2021-12-11-sftp-in-aws/>SFTP in AWS</a></div></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2022/2022-01-05-release-notes-0.6.3/index.html b/blog/2022/2022-01-05-release-notes-0.6.3/index.html
index 08871ac9b12..ebeea5c4722 100644
--- a/blog/2022/2022-01-05-release-notes-0.6.3/index.html
+++ b/blog/2022/2022-01-05-release-notes-0.6.3/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Our latest Velociraptor release contains many new features and bug fixes. This post outlines some of the more interesting changes.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor 0.6.3 Release :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-01-05-release-notes-0.6.3/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-01-05-release-notes-0.6.3/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -186,4 +186,4 @@
 <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a>
 . You can also chat with us directly on discord
 <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>
-.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2022/2022-01-05-searching-for-files-on-linux/index.html b/blog/2022/2022-01-05-searching-for-files-on-linux/index.html
index 0ac02064ece..4b077e5337e 100644
--- a/blog/2022/2022-01-05-searching-for-files-on-linux/index.html
+++ b/blog/2022/2022-01-05-searching-for-files-on-linux/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="A common technique in DFIR is simply searching the filesystem for files. While this seems like a simple task, there are some surprising traps. This article covers some of the issues and possible solutions.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Searching for files :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-01-05-searching-for-files-on-linux/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-01-05-searching-for-files-on-linux/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -252,4 +252,4 @@
 these mechanisms.</p><p>Velociraptor&rsquo;s <code>glob()</code> plugin has fine grained controls allowing
 coverage of only a small set of filesystem types, or mount
 points. This allows Velociraptor to safely search the entire system
-for files balancing coverage with the risk following symlinks.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+for files balancing coverage with the risk following symlinks.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2022/2022-01-12-wmi-eventing/index.html b/blog/2022/2022-01-12-wmi-eventing/index.html
index 144957ad7be..1968589d8d9 100644
--- a/blog/2022/2022-01-12-wmi-eventing/index.html
+++ b/blog/2022/2022-01-12-wmi-eventing/index.html
@@ -3,7 +3,7 @@
 article covers WMI and specifically detection in less familiar
 custom namespaces.
 "><link rel=icon href=/images/favicon.png type=image/png><title>WMI Event Consumers: what are you missing? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-01-12-wmi-eventing/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-01-12-wmi-eventing/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -136,4 +136,4 @@
 to endpoint data. If you would like to try Velociraptor it is available on Github under an open source license.
 As always, please file issues on the bug tracker or ask questions on our
 mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a>. You can also chat with
-us directly on discord at <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><h2 id=references>References</h2><ol><li><a href=https://docs.microsoft.com/en-us/windows/win32/wmisdk/about-wmi>Microsoft documentation, About WMI</a></li><li><a href=https://attack.mitre.org/techniques/T1546/003/>MITRE ATT&amp;CK T1546.003, Event Triggered Execution: Windows Management Instrumentation Event Subscription</a></li><li><a href="https://www.youtube.com/watch?v=R5IEyoFpZq0">Christensen.L and Graeber.M, Blackhat 2018 - Subverting Sysmon: Application of a Formalized Security Product Evasion Methodology</a></li><li><a href=https://github.com/jsecurity101/Windows-API-To-Sysmon-Events/>JSecurity101, Windows APIs To Sysmon-Events</a></li></ol><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+us directly on discord at <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a></p><h2 id=references>References</h2><ol><li><a href=https://docs.microsoft.com/en-us/windows/win32/wmisdk/about-wmi>Microsoft documentation, About WMI</a></li><li><a href=https://attack.mitre.org/techniques/T1546/003/>MITRE ATT&amp;CK T1546.003, Event Triggered Execution: Windows Management Instrumentation Event Subscription</a></li><li><a href="https://www.youtube.com/watch?v=R5IEyoFpZq0">Christensen.L and Graeber.M, Blackhat 2018 - Subverting Sysmon: Application of a Formalized Security Product Evasion Methodology</a></li><li><a href=https://github.com/jsecurity101/Windows-API-To-Sysmon-Events/>JSecurity101, Windows APIs To Sysmon-Events</a></li></ol><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2022/2022-03-21-paths/index.html b/blog/2022/2022-03-21-paths/index.html
index 5318df85c15..f1d9c172b17 100644
--- a/blog/2022/2022-03-21-paths/index.html
+++ b/blog/2022/2022-03-21-paths/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Path handling seems like a simple task but it is surprisingly complex. This article discusses some of the nuances of thinking about paths and introduces Velociraptor's new OSPath feature that easier path manipulation from VQL queries.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Paths and filesystem accessors :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-03-21-paths/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-03-21-paths/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -213,4 +213,4 @@
 the <code>OSPath</code> object methods does the right thing even for more complex
 path and makes it a lot easier to manipulate (for example
 <code>OSPath.Dirname</code> is a valid and correct <code>OSPath</code> for the containing
-directory, even for more complex pathspec based paths)</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+directory, even for more complex pathspec based paths)</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2022/2022-03-22-deaddisk/index.html b/blog/2022/2022-03-22-deaddisk/index.html
index c0dac9b6424..7d4265851e5 100644
--- a/blog/2022/2022-03-22-deaddisk/index.html
+++ b/blog/2022/2022-03-22-deaddisk/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Velociraptor features some advanced forensics capabilities, but traditionally only works on live endpoints. In recent releases it is now also possible to use Velociraptor on dead disk images.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Dead disk Forensics :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-03-22-deaddisk/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-03-22-deaddisk/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -340,4 +340,4 @@
 GitHub under an open source license. As always, please file issues on
 the bug tracker or ask questions on our mailing list
 <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a>. You can also chat with us
-directly on discord at <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+directly on discord at <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2022/2022-03-23-release-notes/index.html b/blog/2022/2022-03-23-release-notes/index.html
index f7d46a068ba..0fb54452491 100644
--- a/blog/2022/2022-03-23-release-notes/index.html
+++ b/blog/2022/2022-03-23-release-notes/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Velociraptor Release 0.6.4 is now LIVE. This post discusses some of the new features.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor 0.6.4 Release :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-03-23-release-notes/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-03-23-release-notes/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -185,4 +185,4 @@
 <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a>
 . You can also chat with us directly on discord
 <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>
-.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2022/2022-06-21-release-notes/index.html b/blog/2022/2022-06-21-release-notes/index.html
index 6780c94180e..0bd04580568 100644
--- a/blog/2022/2022-06-21-release-notes/index.html
+++ b/blog/2022/2022-06-21-release-notes/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Velociraptor Release 0.6.5 is now LIVE. This post discusses some of the new features.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor 0.6.5 Release :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-06-21-release-notes/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-06-21-release-notes/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -127,4 +127,4 @@
 <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a>
 . You can also chat with us directly on discord
 <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>
-.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2022/2022-08-04-post-processing/index.html b/blog/2022/2022-08-04-post-processing/index.html
index 438340c6d54..0361006b77f 100644
--- a/blog/2022/2022-08-04-post-processing/index.html
+++ b/blog/2022/2022-08-04-post-processing/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Sometimes we have a need to post process a collection on the server. This blog post covers this use case and possible approaches.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Postprocessing Collections :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-08-04-post-processing/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-08-04-post-processing/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -275,4 +275,4 @@
 <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a>
 . You can also chat with us directly on discord
 <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>
-.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2022/2022-08-15-release-notes/index.html b/blog/2022/2022-08-15-release-notes/index.html
index 4cc05904d7d..d186dce1bab 100644
--- a/blog/2022/2022-08-15-release-notes/index.html
+++ b/blog/2022/2022-08-15-release-notes/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Velociraptor Release 0.6.6 is now LIVE. This post discusses some of the new features.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor 0.6.6 Release :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-08-15-release-notes/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-08-15-release-notes/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -156,4 +156,4 @@
 <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a>
 . You can also chat with us directly on discord
 <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>
-.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2022/2022-08-17-process-tracker/index.html b/blog/2022/2022-08-17-process-tracker/index.html
index 6101e01bfcc..f0c8885b4d3 100644
--- a/blog/2022/2022-08-17-process-tracker/index.html
+++ b/blog/2022/2022-08-17-process-tracker/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Since 0.6.6, Velociraptor comes with a process tracker. What is it and how can it be used?
 "><link rel=icon href=/images/favicon.png type=image/png><title>The Velociraptor process tracker :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-08-17-process-tracker/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-08-17-process-tracker/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -210,4 +210,4 @@
 <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a>
 . You can also chat with us directly on discord
 <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>
-.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2022/2022-11-21-release-notes/index.html b/blog/2022/2022-11-21-release-notes/index.html
index 33aba807045..350d4a1bc93 100644
--- a/blog/2022/2022-11-21-release-notes/index.html
+++ b/blog/2022/2022-11-21-release-notes/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Velociraptor Release 0.6.7 is now LIVE. This post discusses some of the new features.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor 0.6.7 Release :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-11-21-release-notes/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/2022-11-21-release-notes/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -198,4 +198,4 @@
 <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a>
 . You can also chat with us directly on discord
 <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>
-.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2022/index.html b/blog/2022/index.html
index 8c190e92d80..37cbe201356 100644
--- a/blog/2022/index.html
+++ b/blog/2022/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>2022 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2022/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=top-github-link><a class=github-link title='Edit this page' href=https://github.com/Velocidex/velociraptor-docs/edit/master/content/blog/2022/_index.md target=blank><i class="fas fa-code-branch"></i>
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>2022</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>2022</h1><ul class="children children-div"><div><a href=/blog/2022/2022-01-05-searching-for-files-on-linux/>Searching for files</a></div><div><a href=/blog/2022/2022-01-05-release-notes-0.6.3/>Velociraptor 0.6.3 Release</a></div><div><a href=/blog/2022/2022-01-12-wmi-eventing/>WMI Event Consumers: what are you missing?</a></div><div><a href=/blog/2022/2022-03-22-deaddisk/>Dead disk Forensics</a></div><div><a href=/blog/2022/2022-03-21-paths/>Paths and filesystem accessors</a></div><div><a href=/blog/2022/2022-03-23-release-notes/>Velociraptor 0.6.4 Release</a></div><div><a href=/blog/2022/2022-06-21-release-notes/>Velociraptor 0.6.5 Release</a></div><div><a href=/blog/2022/2022-08-04-post-processing/>Postprocessing Collections</a></div><div><a href=/blog/2022/2022-08-17-process-tracker/>The Velociraptor process tracker</a></div><div><a href=/blog/2022/2022-08-15-release-notes/>Velociraptor 0.6.6 Release</a></div><div><a href=/blog/2022/2022-11-21-release-notes/>Velociraptor 0.6.7 Release</a></div></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<span class=links>2022</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>2022</h1><ul class="children children-div"><div><a href=/blog/2022/2022-01-05-searching-for-files-on-linux/>Searching for files</a></div><div><a href=/blog/2022/2022-01-05-release-notes-0.6.3/>Velociraptor 0.6.3 Release</a></div><div><a href=/blog/2022/2022-01-12-wmi-eventing/>WMI Event Consumers: what are you missing?</a></div><div><a href=/blog/2022/2022-03-22-deaddisk/>Dead disk Forensics</a></div><div><a href=/blog/2022/2022-03-21-paths/>Paths and filesystem accessors</a></div><div><a href=/blog/2022/2022-03-23-release-notes/>Velociraptor 0.6.4 Release</a></div><div><a href=/blog/2022/2022-06-21-release-notes/>Velociraptor 0.6.5 Release</a></div><div><a href=/blog/2022/2022-08-04-post-processing/>Postprocessing Collections</a></div><div><a href=/blog/2022/2022-08-17-process-tracker/>The Velociraptor process tracker</a></div><div><a href=/blog/2022/2022-08-15-release-notes/>Velociraptor 0.6.6 Release</a></div><div><a href=/blog/2022/2022-11-21-release-notes/>Velociraptor 0.6.7 Release</a></div></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2023/2023-01-13-tracking-an-adversary-in-realtime/index.html b/blog/2023/2023-01-13-tracking-an-adversary-in-realtime/index.html
index 0f89bb0ae99..e8e9f0dd28d 100644
--- a/blog/2023/2023-01-13-tracking-an-adversary-in-realtime/index.html
+++ b/blog/2023/2023-01-13-tracking-an-adversary-in-realtime/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="This blog explains how you can use Velociraptor to enable real-time monitoring.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Tracking an adversary in real-time using Velociraptor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2023/2023-01-13-tracking-an-adversary-in-realtime/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2023/2023-01-13-tracking-an-adversary-in-realtime/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -196,4 +196,4 @@
 Velociraptor. And there are still opportunities for building
 artifacts:</p><ul><li>Registry changes (for example when persistence of malware is
 created)</li><li>Detect process injection</li><li>Named pipes detection</li></ul><p>Below is a list of artifacts that are already built:</p><ul><li>File changes (<code>Windows.Detection.Usn</code>)</li><li>DNS request monitoring (for clients: <code>Windows.ETW.DNS</code>, and for
-servers: <code>Windows.ETW.DNSQueriesServer</code>)</li><li>Service creation (<code>Windows.Events.ServiceCreation</code>)</li><li>PsExec usage (<code>Windows.Detection.PsexecService</code>)</li><li>WMI process creation events (<code>Windows.ETW.WMIProcessCreate</code>)</li></ul><p>If you have any other ideas for detection feel free to share!</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+servers: <code>Windows.ETW.DNSQueriesServer</code>)</li><li>Service creation (<code>Windows.Events.ServiceCreation</code>)</li><li>PsExec usage (<code>Windows.Detection.PsexecService</code>)</li><li>WMI process creation events (<code>Windows.ETW.WMIProcessCreate</code>)</li></ul><p>If you have any other ideas for detection feel free to share!</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2023/2023-02-13-release-notes-0.6.8/index.html b/blog/2023/2023-02-13-release-notes-0.6.8/index.html
index 482cf20a31d..dd4a9419c5d 100644
--- a/blog/2023/2023-02-13-release-notes-0.6.8/index.html
+++ b/blog/2023/2023-02-13-release-notes-0.6.8/index.html
@@ -1,7 +1,7 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Velociraptor Release 0.6.8 is now LIVE.
 This post discusses some of the new features.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor 0.6.8 Release :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2023/2023-02-13-release-notes-0.6.8/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2023/2023-02-13-release-notes-0.6.8/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -145,4 +145,4 @@
 <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a>
 . You can also chat with us directly on discord
 <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>
-.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2023/2023-04-03-velociraptor-survey/index.html b/blog/2023/2023-04-03-velociraptor-survey/index.html
index 1cc3f3daf06..46a8f3f455d 100644
--- a/blog/2023/2023-04-03-velociraptor-survey/index.html
+++ b/blog/2023/2023-04-03-velociraptor-survey/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="The Velociraptor development team is interested to hear about how the tool is used in the community in order to shape future development direction.
 "><link rel=icon href=/images/favicon.png type=image/png><title>The Velociraptor annual community survey :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2023/2023-04-03-velociraptor-survey/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2023/2023-04-03-velociraptor-survey/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -259,4 +259,4 @@
 all contributions, from code to documentation, testing and bug reports.</p><p>Finally for all our US based users, we hope to see you all in person
 at <a href=https://www.blackhat.com/us-23/training/schedule/#digging-deeper-with-velociraptor-30129>BlackHat 2023</a> this year! Join us for an in depth Velociraptor
 training and to geek out with VQL for 4 days, learning practical,
-actionable skills and supporting this open source project.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+actionable skills and supporting this open source project.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2023/2023-04-05-qakbot/index.html b/blog/2023/2023-04-05-qakbot/index.html
index 395c9dbda1d..13f45e9b833 100644
--- a/blog/2023/2023-04-05-qakbot/index.html
+++ b/blog/2023/2023-04-05-qakbot/index.html
@@ -1,7 +1,7 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="This is a technical post covering practical methodology to extract
 configuration data from recent Qakbot samples.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Automating Qakbot decode at scale :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2023/2023-04-05-qakbot/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2023/2023-04-05-qakbot/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -159,4 +159,4 @@
 types of memory analysis enabled by Velociraptor and incorporated into
 our training courses.</p><p>I also would like to thank some of Rapid7’s great analysts - <code>Jakob Denlinger</code>
 and <code>James Dunne</code> for bouncing some ideas when writing this
-post.</p><h3 id=references>References</h3><ol><li><a href=https://malpedia.caad.fkie.fraunhofer.de/details/win.qakbot>Malpedia, Qakbot</a></li><li><a href=https://www.elastic.co/security-labs/qbot-malware-analysis>Elastic, QBOT Malware Analysis</a></li><li><a href=https://github.com/hasherezade/hollows_hunter>Hasherezade, Hollows Hunter</a></li><li><a href=https://docs.velociraptor.app/exchange/artifacts/pages/qakbot/>Windows.Carving.Qakbot</a></li></ol><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+post.</p><h3 id=references>References</h3><ol><li><a href=https://malpedia.caad.fkie.fraunhofer.de/details/win.qakbot>Malpedia, Qakbot</a></li><li><a href=https://www.elastic.co/security-labs/qbot-malware-analysis>Elastic, QBOT Malware Analysis</a></li><li><a href=https://github.com/hasherezade/hollows_hunter>Hasherezade, Hollows Hunter</a></li><li><a href=https://docs.velociraptor.app/exchange/artifacts/pages/qakbot/>Windows.Carving.Qakbot</a></li></ol><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2023/2023-05-05-release-notes-0.6.9/index.html b/blog/2023/2023-05-05-release-notes-0.6.9/index.html
index 917f28cd7a7..b941bd13192 100644
--- a/blog/2023/2023-05-05-release-notes-0.6.9/index.html
+++ b/blog/2023/2023-05-05-release-notes-0.6.9/index.html
@@ -1,7 +1,7 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Velociraptor Release 0.6.9 is now LIVE!
 This post discusses some of the new features.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor 0.6.9 Release :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2023/2023-05-05-release-notes-0.6.9/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2023/2023-05-05-release-notes-0.6.9/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -219,4 +219,4 @@
 .</p><p>If you want to master Velociraptor, consider joining us at the full
 Velociraptor training course held this year at the Blackhat
 Conference and delivered by the Velociraptor developers themselves.</p><p>Details here:
-<a href=https://docs.velociraptor.app/announcements/2023-trainings/>https://docs.velociraptor.app/announcements/2023-trainings/</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<a href=https://docs.velociraptor.app/announcements/2023-trainings/>https://docs.velociraptor.app/announcements/2023-trainings/</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2023/2023-07-27-release-notes-0.7.0/index.html b/blog/2023/2023-07-27-release-notes-0.7.0/index.html
index f52a62a7470..99e78e509da 100644
--- a/blog/2023/2023-07-27-release-notes-0.7.0/index.html
+++ b/blog/2023/2023-07-27-release-notes-0.7.0/index.html
@@ -1,7 +1,7 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Velociraptor Release 0.7.0 is now released
 This post discusses some of the new features.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor 0.7.0 Release :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2023/2023-07-27-release-notes-0.7.0/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2023/2023-07-27-release-notes-0.7.0/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -160,4 +160,4 @@
 <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a>
 . You can also chat with us directly on discord
 <a href=https://www.velocidex.com/discord>https://www.velocidex.com/discord</a>
-.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/2023/index.html b/blog/2023/index.html
index f6ea1193356..ad19e8e3ea5 100644
--- a/blog/2023/index.html
+++ b/blog/2023/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>2023 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2023/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/2023/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=top-github-link><a class=github-link title='Edit this page' href=https://github.com/Velocidex/velociraptor-docs/edit/master/content/blog/2023/_index.md target=blank><i class="fas fa-code-branch"></i>
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>2023</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>2023</h1><ul class="children children-div"><div><a href=/blog/2023/2023-01-13-tracking-an-adversary-in-realtime/>Tracking an adversary in real-time using Velociraptor</a></div><div><a href=/blog/2023/2023-02-13-release-notes-0.6.8/>Velociraptor 0.6.8 Release</a></div><div><a href=/blog/2023/2023-04-03-velociraptor-survey/>The Velociraptor annual community survey</a></div><div><a href=/blog/2023/2023-04-05-qakbot/>Automating Qakbot decode at scale</a></div><div><a href=/blog/2023/2023-05-05-release-notes-0.6.9/>Velociraptor 0.6.9 Release</a></div><div><a href=/blog/2023/2023-07-27-release-notes-0.7.0/>Velociraptor 0.7.0 Release</a></div></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<span class=links>2023</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>2023</h1><ul class="children children-div"><div><a href=/blog/2023/2023-01-13-tracking-an-adversary-in-realtime/>Tracking an adversary in real-time using Velociraptor</a></div><div><a href=/blog/2023/2023-02-13-release-notes-0.6.8/>Velociraptor 0.6.8 Release</a></div><div><a href=/blog/2023/2023-04-03-velociraptor-survey/>The Velociraptor annual community survey</a></div><div><a href=/blog/2023/2023-04-05-qakbot/>Automating Qakbot decode at scale</a></div><div><a href=/blog/2023/2023-05-05-release-notes-0.6.9/>Velociraptor 0.6.9 Release</a></div><div><a href=/blog/2023/2023-07-27-release-notes-0.7.0/>Velociraptor 0.7.0 Release</a></div></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2018/08/10/browsing_around_the_filesystem/index.html b/blog/html/2018/08/10/browsing_around_the_filesystem/index.html
index 880c2b8261a..8256486a91f 100644
--- a/blog/html/2018/08/10/browsing_around_the_filesystem/index.html
+++ b/blog/html/2018/08/10/browsing_around_the_filesystem/index.html
@@ -4,7 +4,7 @@
 make Velociraptor much faster we made some tradeoffs and improved the
 way that the VFS is stored in the datastore.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Browsing around the filesystem. :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/08/10/browsing_around_the_filesystem/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/08/10/browsing_around_the_filesystem/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -144,4 +144,4 @@
 them represent files that we have a local cache for. We can view the
 Hexview or just download them.</p><p>You can always initiate a download of a VFS file by selecting the
 Download tab. Unlike GRR, Velociraptor does not keep previous versions
-of files - a re-download will overwrite the previous file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+of files - a re-download will overwrite the previous file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2018/08/10/design_differences_between_velociraptor_and_grr/index.html b/blog/html/2018/08/10/design_differences_between_velociraptor_and_grr/index.html
index fe189b43df4..5cd40acd255 100644
--- a/blog/html/2018/08/10/design_differences_between_velociraptor_and_grr/index.html
+++ b/blog/html/2018/08/10/design_differences_between_velociraptor_and_grr/index.html
@@ -5,7 +5,7 @@
 keep it light weight cutting out the features we think we did not need
 and leaving behind a fast, lean and mean raptor!
 "><link rel=icon href=/images/favicon.png type=image/png><title>Design differences between Velociraptor and GRR :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/08/10/design_differences_between_velociraptor_and_grr/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/08/10/design_differences_between_velociraptor_and_grr/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -185,4 +185,4 @@
 much lower, the frontend can handle a much larger load. Furthermore, the
 flows typically execute in very short time (since there is only one
 round trip). The overall result is that flow throughput is much
-increased and resource usage is reduced.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+increased and resource usage is reduced.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2018/08/10/files_files_everything_is_just_a_file/index.html b/blog/html/2018/08/10/files_files_everything_is_just_a_file/index.html
index 514c39d10e7..bc5d25d885e 100644
--- a/blog/html/2018/08/10/files_files_everything_is_just_a_file/index.html
+++ b/blog/html/2018/08/10/files_files_everything_is_just_a_file/index.html
@@ -2,7 +2,7 @@
 store architecture. The default data store
 is now the FileBaseDataStore which stores all data in flat files.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Files, files everything is just a file! :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/08/10/files_files_everything_is_just_a_file/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/08/10/files_files_everything_is_just_a_file/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -180,4 +180,4 @@
 +-------+--------------------------------+---------------------+------+-----------+--------------------
 /usr: SELECT IsDir, FullPath as _FullPath, Name, Size, Mode, timestamp(epoch=Sys.Mtim.Sec) as mtime,
   timestamp(epoch=Sys.Atim.Sec) as ys.Ctim.Sec) as ctime FROM glob(globs=path + '/**5')
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2018/08/10/hunting_what_velociraptors_do_best/index.html b/blog/html/2018/08/10/hunting_what_velociraptors_do_best/index.html
index 5b84a06c364..bb046c37c56 100644
--- a/blog/html/2018/08/10/hunting_what_velociraptors_do_best/index.html
+++ b/blog/html/2018/08/10/hunting_what_velociraptors_do_best/index.html
@@ -5,7 +5,7 @@
 flows to run simultaneously and so this creates a large contention of
 shared state.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Hunting - What Velociraptors do best! :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/08/10/hunting_what_velociraptors_do_best/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/08/10/hunting_what_velociraptors_do_best/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -131,4 +131,4 @@
 from all client's. For example, the GUI allows downloading a zip file
 of all the results and files uploaded:</p><p><img src=image7.png alt></p><p>Since hunts invoke regular flows, and Velociraptor flows are much
 lighter than GRR's flows, hunts are much cheaper to run in terms of
-resources consumed.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+resources consumed.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2018/08/10/interrogation_make_the_endpoint_tell_us_what_it_knows/index.html b/blog/html/2018/08/10/interrogation_make_the_endpoint_tell_us_what_it_knows/index.html
index f9bef7ed920..51c7e797c1a 100644
--- a/blog/html/2018/08/10/interrogation_make_the_endpoint_tell_us_what_it_knows/index.html
+++ b/blog/html/2018/08/10/interrogation_make_the_endpoint_tell_us_what_it_knows/index.html
@@ -3,7 +3,7 @@
 interrogated when it first joins the Velociraptor server, and the GUI
 shows this general information about each client.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Interrogation - Make the endpoint tell us what it knows! :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/08/10/interrogation_make_the_endpoint_tell_us_what_it_knows/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/08/10/interrogation_make_the_endpoint_tell_us_what_it_knows/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -149,4 +149,4 @@
        upload(file=FullPath) as Upload
        from glob(globs='/home/*/.ssh/authorized_keys')
 </code></pre><p>From now on the additional query will be recorded for all clients. The
-GUI shows it in the client information page:</p><p><img src=image6.png alt></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+GUI shows it in the client information page:</p><p><img src=image6.png alt></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2018/08/10/introducing_velociraptor/index.html b/blog/html/2018/08/10/introducing_velociraptor/index.html
index 92045650a19..d58d266d9f9 100644
--- a/blog/html/2018/08/10/introducing_velociraptor/index.html
+++ b/blog/html/2018/08/10/introducing_velociraptor/index.html
@@ -3,7 +3,7 @@
 This post introduces a new tool called Velociraptor - an advanced
 DFIR tool.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Introducing Velociraptor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/08/10/introducing_velociraptor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/08/10/introducing_velociraptor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -205,4 +205,4 @@
 quickly.</li><li>Develop a library of VQL expressions which may be reusable. This
 should be similar to GRR's idea of Artifacts but be more geared
 towards VQL.</li></ul><p>Please play with it and send feedback to
-<a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a></p><p><img src=image11.png alt></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a></p><p><img src=image11.png alt></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2018/08/10/the_velocidex_query_language/index.html b/blog/html/2018/08/10/the_velocidex_query_language/index.html
index 8b65ba1eb98..7e976121e30 100644
--- a/blog/html/2018/08/10/the_velocidex_query_language/index.html
+++ b/blog/html/2018/08/10/the_velocidex_query_language/index.html
@@ -2,7 +2,7 @@
 makes it so powerful. But what exactly is VQL? This section is a quick
 overview of VQL.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Velocidex Query Language (VQL) :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/08/10/the_velocidex_query_language/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/08/10/the_velocidex_query_language/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -218,4 +218,4 @@
 successfully:</p><pre><code class=language-{.sourceCode>SELECT FullPath from glob(globs=PATH)
 </code></pre><p>You should always try to write VQL queries referring to parameters in
 the environment because this makes them reusable - the scope parameters
-become inputs to your query and the query becomes a reusable function.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+become inputs to your query and the query becomes a reusable function.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2018/08/20/velociraptor_artifacts/index.html b/blog/html/2018/08/20/velociraptor_artifacts/index.html
index 2ce6d8b3274..f881a98a7e4 100644
--- a/blog/html/2018/08/20/velociraptor_artifacts/index.html
+++ b/blog/html/2018/08/20/velociraptor_artifacts/index.html
@@ -3,7 +3,7 @@
 first time. This post is about what artifacts are, what they do and
 how can you use them.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor Artifacts :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/08/20/velociraptor_artifacts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/08/20/velociraptor_artifacts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -325,4 +325,4 @@
 </code></pre><h2 id=the-future>The future</h2><p>We started implementing many of the simpler OSQuery tables using VQL.
 For the remaining tables (the ones that need to call out to libraries or
 more complex APIs), we will integrate these using a set of specialized
-VQL plugins over time.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+VQL plugins over time.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2018/09/03/velociraptor_s_client_communications/index.html b/blog/html/2018/09/03/velociraptor_s_client_communications/index.html
index 5e411e11da6..d46d2c8439b 100644
--- a/blog/html/2018/09/03/velociraptor_s_client_communications/index.html
+++ b/blog/html/2018/09/03/velociraptor_s_client_communications/index.html
@@ -5,7 +5,7 @@
 communication and how it solves the problems with the old GRR's client
 communication.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor's client communications :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/09/03/velociraptor_s_client_communications/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/09/03/velociraptor_s_client_communications/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -202,4 +202,4 @@
 instantaneous access to clients. This actually reduces the overall load
 on the system because we do not need to perform frequent client polls
 just to check if a new flow is launched. User experience is much better
-as users can interact with clients immediately.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+as users can interact with clients immediately.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2018/09/03/velociraptor_walk_through_and_demo/index.html b/blog/html/2018/09/03/velociraptor_walk_through_and_demo/index.html
index 39a7e3f91f4..30f12ac58b2 100644
--- a/blog/html/2018/09/03/velociraptor_walk_through_and_demo/index.html
+++ b/blog/html/2018/09/03/velociraptor_walk_through_and_demo/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="A screencast of the latest Velociraptor"><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor walk through and demo :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/09/03/velociraptor_walk_through_and_demo/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/09/03/velociraptor_walk_through_and_demo/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Velociraptor walk through and demo</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Velociraptor walk through and demo</h1><p>I just uploaded a screencast of the latest Velociraptor - check it out
 and play with it, and please provide feedback at
-<a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a></p><div style=position:relative;padding-bottom:56.25%;height:0;overflow:hidden;max-width:100%;height:auto><iframe width=560 height=315 src=https://www.youtube.com/embed/ecP-TeUvSEY frameborder=0 allow="autoplay; encrypted-media" allowfullscreen></iframe></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+<a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a></p><div style=position:relative;padding-bottom:56.25%;height:0;overflow:hidden;max-width:100%;height:auto><iframe width=560 height=315 src=https://www.youtube.com/embed/ecP-TeUvSEY frameborder=0 allow="autoplay; encrypted-media" allowfullscreen></iframe></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2018/09/29/detecting_powershell_persistence_with_velociraptor_and_yara/index.html b/blog/html/2018/09/29/detecting_powershell_persistence_with_velociraptor_and_yara/index.html
index 089938debbe..462abd2ea30 100644
--- a/blog/html/2018/09/29/detecting_powershell_persistence_with_velociraptor_and_yara/index.html
+++ b/blog/html/2018/09/29/detecting_powershell_persistence_with_velociraptor_and_yara/index.html
@@ -2,7 +2,7 @@
 across Mari DeGrazia's talk titled &#34;Finding and Decoding Malicious
 Powershell Scripts&#34;
 "><link rel=icon href=/images/favicon.png type=image/png><title>Detecting powershell persistence with Velociraptor and Yara :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/09/29/detecting_powershell_persistence_with_velociraptor_and_yara/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/09/29/detecting_powershell_persistence_with_velociraptor_and_yara/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -346,4 +346,4 @@
 a user is logged in so when we hunt, we might miss those users who are
 currently logged out. We saw how YARA can be used to detect suspicious
 patterns in raw registry hive files and how artifacts may retrieve those
-files for further analysis.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+files for further analysis.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2018/09/30/velorciraptor_s_filesystem_s_accessors/index.html b/blog/html/2018/09/30/velorciraptor_s_filesystem_s_accessors/index.html
index 2905a2ad265..51296ad46a9 100644
--- a/blog/html/2018/09/30/velorciraptor_s_filesystem_s_accessors/index.html
+++ b/blog/html/2018/09/30/velorciraptor_s_filesystem_s_accessors/index.html
@@ -3,7 +3,7 @@
 locked by the operating system such as registry hives, pagefile and
 other locked files.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor's filesystem's accessors :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/09/30/velorciraptor_s_filesystem_s_accessors/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/09/30/velorciraptor_s_filesystem_s_accessors/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -259,4 +259,4 @@
 new accessor, we are able to glob, hash, yara scan etc the new
 abstraction. For example, to yara scan a registry key one simply calls
 the VQL plugin yara with an accessor of reg: yara(rules=myRules,
-files=my_reg_keys, accessor="reg")</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+files=my_reg_keys, accessor="reg")</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2018/11/09/event_queries_and_endpoint_monitoring/index.html b/blog/html/2018/11/09/event_queries_and_endpoint_monitoring/index.html
index e88c14e8208..cb3c8cfa6fe 100644
--- a/blog/html/2018/11/09/event_queries_and_endpoint_monitoring/index.html
+++ b/blog/html/2018/11/09/event_queries_and_endpoint_monitoring/index.html
@@ -9,7 +9,7 @@
 collect things such as event logs, process execution and more in real
 time.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Event Queries and Endpoint Monitoring :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/11/09/event_queries_and_endpoint_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/11/09/event_queries_and_endpoint_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -197,4 +197,4 @@
 There is a lot of value in things like process execution logging, and
 remote event log forwarding. We will cover some more examples of event
 log monitoring in future blog posts. Until then, have a play and provide
-feedback as usual by filing issues and feature requests.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+feedback as usual by filing issues and feature requests.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2018/11/13/velociraptor_training_at_nzitf/index.html b/blog/html/2018/11/13/velociraptor_training_at_nzitf/index.html
index 7c18ab300b7..735abf3c562 100644
--- a/blog/html/2018/11/13/velociraptor_training_at_nzitf/index.html
+++ b/blog/html/2018/11/13/velociraptor_training_at_nzitf/index.html
@@ -1,7 +1,7 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="We are very excited to run this full day training workshop at the New
 Zealand Internet Engineering Task Force (NZITF) conference.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor training at NZITF :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/11/13/velociraptor_training_at_nzitf/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/11/13/velociraptor_training_at_nzitf/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -73,4 +73,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Velociraptor training at NZITF</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Velociraptor training at NZITF</h1><h1 id=velociraptor-training-at-nzitf>Velociraptor training at NZITF</h1><p>We are very excited to run this full day training workshop at the New
 Zealand Internet Engineering Task Force (NZITF) conference.</p><p>The training material can be downloaded here <a href=/resources/nzitf_velociraptor.pdf>"Velociraptor NZITF
-training"</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+training"</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2018/12/09/more_on_client_event_collection/index.html b/blog/html/2018/12/09/more_on_client_event_collection/index.html
index 7c1f3880873..6b4a5e58aac 100644
--- a/blog/html/2018/12/09/more_on_client_event_collection/index.html
+++ b/blog/html/2018/12/09/more_on_client_event_collection/index.html
@@ -7,7 +7,7 @@
 This post takes another look at event queries and demonstrates how
 these can be used to implement some interesting features.
 "><link rel=icon href=/images/favicon.png type=image/png><title>More on client event collection :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/12/09/more_on_client_event_collection/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/12/09/more_on_client_event_collection/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -161,4 +161,4 @@
 1544363581.8004665,14.920000000000002,18284544
 1544363591.8007126,14.920000000000002,18284544
 1544363601.8008528,14.920000000000002,18284544
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2018/12/10/server_side_vql_queries_and_events/index.html b/blog/html/2018/12/10/server_side_vql_queries_and_events/index.html
index 7954c6b2655..cb97a1d1195 100644
--- a/blog/html/2018/12/10/server_side_vql_queries_and_events/index.html
+++ b/blog/html/2018/12/10/server_side_vql_queries_and_events/index.html
@@ -3,7 +3,7 @@
 artifacts can be used to customize the operation of the server -
 without modifying any code or redeploying the server components.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Server side VQL queries and Escalation Events :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/12/10/server_side_vql_queries_and_events/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/12/10/server_side_vql_queries_and_events/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -304,4 +304,4 @@
 or quarantine it (by running shell commands on the compromised
 host).</li></ol><p>The possibilities are truly endless. Comment below if you have more
 interesting ideas and do not hesitate to contribute artifact definitions
-to address your real world use cases.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+to address your real world use cases.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2018/12/11/velociraptor_interactive_shell/index.html b/blog/html/2018/12/11/velociraptor_interactive_shell/index.html
index ed5399f02c3..fcbc48c04d3 100644
--- a/blog/html/2018/12/11/velociraptor_interactive_shell/index.html
+++ b/blog/html/2018/12/11/velociraptor_interactive_shell/index.html
@@ -3,7 +3,7 @@
 point over the standard Velociraptor communication mechanism - an
 encrypted and authenticated channel.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor Interactive Shell :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/12/11/velociraptor_interactive_shell/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/12/11/velociraptor_interactive_shell/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -174,4 +174,4 @@
 interactive shell by sending the admin an mail (See previous blog post).
 This way we can see if someone misused the feature. Alternatively we
 may simply archive the event queue CSV file for long term auditing of
-any interactive shell use.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+any interactive shell use.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2018/12/22/configuring_velociraptor_for_ssl/index.html b/blog/html/2018/12/22/configuring_velociraptor_for_ssl/index.html
index 13aef592603..a2f4e849f82 100644
--- a/blog/html/2018/12/22/configuring_velociraptor_for_ssl/index.html
+++ b/blog/html/2018/12/22/configuring_velociraptor_for_ssl/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="This post describes how to deploy Velociraptor with SSL on a cloud VM.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Configuring Velociraptor for SSL :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/12/22/configuring_velociraptor_for_ssl/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/12/22/configuring_velociraptor_for_ssl/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -172,4 +172,4 @@
 Note
 :::</p><p>This feature will be available in the upcoming 0.27 release. You can try
 it now by building from git head.
-:::</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+:::</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2018/12/23/deploying_velociraptor_with_oauth_sso/index.html b/blog/html/2018/12/23/deploying_velociraptor_with_oauth_sso/index.html
index e4123aa018c..b2f59a283ca 100644
--- a/blog/html/2018/12/23/deploying_velociraptor_with_oauth_sso/index.html
+++ b/blog/html/2018/12/23/deploying_velociraptor_with_oauth_sso/index.html
@@ -2,7 +2,7 @@
 SSL. In this post we discuss how to enable Google's SSO authentication for
 Velociraptor identity management.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Deploying Velociraptor with OAuth SSO :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/12/23/deploying_velociraptor_with_oauth_sso/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2018/12/23/deploying_velociraptor_with_oauth_sso/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -160,4 +160,4 @@
 the browser we can now see the Velociraptor application:</p><p><img src=8.png alt></p><p>We can see that the logged in user is authenticated by Google, and we
 can also see their Google avatar at the top right for some more eye
 candy :-).</p><div class="mynotices note"><div heading=" Thanks "><p>Shouts to the folks from <a href=https://www.kleinco.com.au/>Klein & Co</a> who
-sponsored this exciting feature!.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+sponsored this exciting feature!.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2019/02/09/velociraptor_python_api/index.html b/blog/html/2019/02/09/velociraptor_python_api/index.html
index a8ce855db7f..868643caa06 100644
--- a/blog/html/2019/02/09/velociraptor_python_api/index.html
+++ b/blog/html/2019/02/09/velociraptor_python_api/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="Velociraptor usually is only a part of a wider solution which might include a SIEM and SOC integration. In order to facilitate interoperability with other tools, Velociraptor now offers an external API."><link rel=icon href=/images/favicon.png type=image/png><title>The Velociraptor Python API :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2019/02/09/velociraptor_python_api/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2019/02/09/velociraptor_python_api/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -248,4 +248,4 @@
 I am very excited to see what the community will do with this feature -
 I can see integration with ELK, BigQuery and other data analytic engines
 being a valuable use case.</p><p>Please share your experiences in the comments or on the mailing list at
-<a href=mailto:velociraptor-discuss@groups.google.com>velociraptor-discuss@groups.google.com</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<a href=mailto:velociraptor-discuss@groups.google.com>velociraptor-discuss@groups.google.com</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2019/02/10/velociraptor_performance/index.html b/blog/html/2019/02/10/velociraptor_performance/index.html
index ae9c11b88fd..d50dbeafcee 100644
--- a/blog/html/2019/02/10/velociraptor_performance/index.html
+++ b/blog/html/2019/02/10/velociraptor_performance/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="We are often asked how many resources does a Velociraptor deployment use? How should one spec a machine for a Velociraptor deployment?"><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor Performance :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2019/02/10/velociraptor_performance/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2019/02/10/velociraptor_performance/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -224,4 +224,4 @@
 development and this feedback is important to ensure we put in place the
 mechanisms to account for more use cases.</p><h2 id=thanks>Thanks</h2><p>We would like to thank the folk at
 <a href=https://www.kleinco.com.au/>Klein&amp;Co</a> for their wonderful support and
-assistance in Velociraptor development.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+assistance in Velociraptor development.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2019/02/14/alerting_on_event_patterns/index.html b/blog/html/2019/02/14/alerting_on_event_patterns/index.html
index 2035395cdd8..e3d5629033f 100644
--- a/blog/html/2019/02/14/alerting_on_event_patterns/index.html
+++ b/blog/html/2019/02/14/alerting_on_event_patterns/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="We have shown in earlier posts how Velociraptor uses VQL to define event queries that can detect specific conditions. These conditions can be used to create alerts and escalation actions."><link rel=icon href=/images/favicon.png type=image/png><title>Alerting on event patterns :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2019/02/14/alerting_on_event_patterns/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2019/02/14/alerting_on_event_patterns/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -239,4 +239,4 @@
 ordered pattern of behavior. This technique is useful to codify common
 attack techniques. The technique is general and we can use the same idea
 on server side queries to correlate events from many hosts at the same
-time.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+time.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2019/03/02/agentless_hunting_with_velociraptor/index.html b/blog/html/2019/03/02/agentless_hunting_with_velociraptor/index.html
index d0d5ddc6a9f..c4339f23c95 100644
--- a/blog/html/2019/03/02/agentless_hunting_with_velociraptor/index.html
+++ b/blog/html/2019/03/02/agentless_hunting_with_velociraptor/index.html
@@ -4,7 +4,7 @@
 permanently on the end point, but rather push it to end points
 temporarily to collect specific artifacts.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Agentless hunting with Velociraptor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2019/03/02/agentless_hunting_with_velociraptor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2019/03/02/agentless_hunting_with_velociraptor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -140,4 +140,4 @@
   writeback_windows: $TEMP\\velociraptor.writeback.yaml
 </code></pre><p>The file will remain in the client's temp directory so if you ever
 decide to run the agentless client again (by pushing another group
-policy) the client id remains the same.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+policy) the client id remains the same.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/blog/html/2019/08/28/the_velociraptor_api/index.html b/blog/html/2019/08/28/the_velociraptor_api/index.html
index e7e81812734..e0354225c2f 100644
--- a/blog/html/2019/08/28/the_velociraptor_api/index.html
+++ b/blog/html/2019/08/28/the_velociraptor_api/index.html
@@ -3,7 +3,7 @@
 demonstrate an example of a program which takes advantage of the API
 to present the client's VFS as a FUSE filesystem.
 "><link rel=icon href=/images/favicon.png type=image/png><title>The Velociraptor API and FUSE :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2019/08/28/the_velociraptor_api/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/html/2019/08/28/the_velociraptor_api/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -143,4 +143,4 @@
 level disk analysis system (such as X-Ways) on the mounted FUSE
 drive. However you can still run specialized file parsers (such as
 Kape or log2timeline) as long as they do not require access to the raw
-devices.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+devices.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/blog/index.html b/blog/index.html
index 578a23832c6..85e464ac5f5 100644
--- a/blog/index.html
+++ b/blog/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor Blog :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/blog/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -83,4 +83,4 @@
          </div>
        </div>
     </div>
-</div>`);n.find(".title").append(t.title),n.find(".description").append(t.description),n.find(".title").attr("href",t.link),n.find(".date").append(t.date);for(let e=0;e<t.tags.length;e++){let s=t.tags[e],o=$(`<a class="space tag"><i class="linkcolour label label-success">`+s+`</i></a>`).click(function(){document.getElementById("myInput").value=s,doSearch()});n.find(".idea-tag").append(o)}let o=$(".search_results").append(n)}}function myFunction(){var e,n,s,o=document.getElementById("myInput"),i=o.value.toUpperCase(),a=document.getElementById("myUL"),t=a.getElementsByTagName("li");for(e=0;e<t.length;e++)n=t[e].getElementsByTagName("a")[0],s=n.textContent||n.innerText,s.toUpperCase().indexOf(i)>-1?t[e].style.display="":t[e].style.display="none"}function community(){}</script><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</div>`);n.find(".title").append(t.title),n.find(".description").append(t.description),n.find(".title").attr("href",t.link),n.find(".date").append(t.date);for(let e=0;e<t.tags.length;e++){let s=t.tags[e],o=$(`<a class="space tag"><i class="linkcolour label label-success">`+s+`</i></a>`).click(function(){document.getElementById("myInput").value=s,doSearch()});n.find(".idea-tag").append(o)}let o=$(".search_results").append(n)}}function myFunction(){var e,n,s,o=document.getElementById("myInput"),i=o.value.toUpperCase(),a=document.getElementById("myUL"),t=a.getElementsByTagName("li");for(e=0;e<t.length;e++)n=t[e].getElementsByTagName("a")[0],s=n.textContent||n.innerText,s.toUpperCase().indexOf(i)>-1?t[e].style.display="":t[e].style.display="none"}function community(){}</script><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/categories/blog/index.html b/categories/blog/index.html
index 66949e58fa6..203602d867a 100644
--- a/categories/blog/index.html
+++ b/categories/blog/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Blog :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/categories/blog/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/categories/blog/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Blog</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>category ::
-Blog</h1><ul><li><a href=/blog/html/2018/08/10/browsing_around_the_filesystem/>Browsing around the filesystem.</a></li><li><a href=/blog/html/2018/09/03/velociraptor_s_client_communications/>Velociraptor's client communications</a></li><li><a href=/blog/html/2019/08/28/the_velociraptor_api/>The Velociraptor API and FUSE</a></li><li><a href=/blog/2019/2019-03-02/>Agentless hunting with Velociraptor</a></li><li><a href=/blog/html/2019/03/02/agentless_hunting_with_velociraptor/>Agentless hunting with Velociraptor</a></li><li><a href=/blog/html/2019/02/14/alerting_on_event_patterns/>Alerting on event patterns</a></li><li><a href=/blog/html/2019/02/10/velociraptor_performance/>Velociraptor Performance</a></li><li><a href=/blog/html/2019/02/09/velociraptor_python_api/>The Velociraptor Python API</a></li><li><a href=/blog/html/2018/12/23/deploying_velociraptor_with_oauth_sso/>Deploying Velociraptor with OAuth SSO</a></li><li><a href=/blog/html/2018/12/22/configuring_velociraptor_for_ssl/>Configuring Velociraptor for SSL</a></li><li><a href=/blog/html/2018/12/11/velociraptor_interactive_shell/>Velociraptor Interactive Shell</a></li><li><a href=/blog/html/2018/12/10/server_side_vql_queries_and_events/>Server side VQL queries and Escalation Events</a></li><li><a href=/blog/html/2018/12/09/more_on_client_event_collection/>More on client event collection</a></li><li><a href=/blog/html/2018/11/13/velociraptor_training_at_nzitf/>Velociraptor training at NZITF</a></li><li><a href=/blog/html/2018/11/09/event_queries_and_endpoint_monitoring/>Event Queries and Endpoint Monitoring</a></li><li><a href=/blog/html/2018/09/30/velorciraptor_s_filesystem_s_accessors/>Velociraptor's filesystem's accessors</a></li><li><a href=/blog/html/2018/09/29/detecting_powershell_persistence_with_velociraptor_and_yara/>Detecting powershell persistence with Velociraptor and Yara</a></li><li><a href=/blog/html/2018/09/03/velociraptor_walk_through_and_demo/>Velociraptor walk through and demo</a></li><li><a href=/blog/html/2018/08/20/velociraptor_artifacts/>Velociraptor Artifacts</a></li><li><a href=/blog/html/2018/08/10/design_differences_between_velociraptor_and_grr/>Design differences between Velociraptor and GRR</a></li><li><a href=/blog/html/2018/08/10/files_files_everything_is_just_a_file/>Files, files everything is just a file!</a></li><li><a href=/blog/html/2018/08/10/hunting_what_velociraptors_do_best/>Hunting - What Velociraptors do best!</a></li><li><a href=/blog/html/2018/08/10/interrogation_make_the_endpoint_tell_us_what_it_knows/>Interrogation - Make the endpoint tell us what it knows!</a></li><li><a href=/blog/html/2018/08/10/the_velocidex_query_language/>Velocidex Query Language (VQL)</a></li><li><a href=/blog/html/2018/08/10/introducing_velociraptor/>Introducing Velociraptor</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Blog</h1><ul><li><a href=/blog/html/2018/08/10/browsing_around_the_filesystem/>Browsing around the filesystem.</a></li><li><a href=/blog/html/2018/09/03/velociraptor_s_client_communications/>Velociraptor's client communications</a></li><li><a href=/blog/html/2019/08/28/the_velociraptor_api/>The Velociraptor API and FUSE</a></li><li><a href=/blog/2019/2019-03-02/>Agentless hunting with Velociraptor</a></li><li><a href=/blog/html/2019/03/02/agentless_hunting_with_velociraptor/>Agentless hunting with Velociraptor</a></li><li><a href=/blog/html/2019/02/14/alerting_on_event_patterns/>Alerting on event patterns</a></li><li><a href=/blog/html/2019/02/10/velociraptor_performance/>Velociraptor Performance</a></li><li><a href=/blog/html/2019/02/09/velociraptor_python_api/>The Velociraptor Python API</a></li><li><a href=/blog/html/2018/12/23/deploying_velociraptor_with_oauth_sso/>Deploying Velociraptor with OAuth SSO</a></li><li><a href=/blog/html/2018/12/22/configuring_velociraptor_for_ssl/>Configuring Velociraptor for SSL</a></li><li><a href=/blog/html/2018/12/11/velociraptor_interactive_shell/>Velociraptor Interactive Shell</a></li><li><a href=/blog/html/2018/12/10/server_side_vql_queries_and_events/>Server side VQL queries and Escalation Events</a></li><li><a href=/blog/html/2018/12/09/more_on_client_event_collection/>More on client event collection</a></li><li><a href=/blog/html/2018/11/13/velociraptor_training_at_nzitf/>Velociraptor training at NZITF</a></li><li><a href=/blog/html/2018/11/09/event_queries_and_endpoint_monitoring/>Event Queries and Endpoint Monitoring</a></li><li><a href=/blog/html/2018/09/30/velorciraptor_s_filesystem_s_accessors/>Velociraptor's filesystem's accessors</a></li><li><a href=/blog/html/2018/09/29/detecting_powershell_persistence_with_velociraptor_and_yara/>Detecting powershell persistence with Velociraptor and Yara</a></li><li><a href=/blog/html/2018/09/03/velociraptor_walk_through_and_demo/>Velociraptor walk through and demo</a></li><li><a href=/blog/html/2018/08/20/velociraptor_artifacts/>Velociraptor Artifacts</a></li><li><a href=/blog/html/2018/08/10/design_differences_between_velociraptor_and_grr/>Design differences between Velociraptor and GRR</a></li><li><a href=/blog/html/2018/08/10/files_files_everything_is_just_a_file/>Files, files everything is just a file!</a></li><li><a href=/blog/html/2018/08/10/hunting_what_velociraptors_do_best/>Hunting - What Velociraptors do best!</a></li><li><a href=/blog/html/2018/08/10/interrogation_make_the_endpoint_tell_us_what_it_knows/>Interrogation - Make the endpoint tell us what it knows!</a></li><li><a href=/blog/html/2018/08/10/the_velocidex_query_language/>Velocidex Query Language (VQL)</a></li><li><a href=/blog/html/2018/08/10/introducing_velociraptor/>Introducing Velociraptor</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/categories/index.html b/categories/index.html
index 96b6fd60e82..32fcf8ed203 100644
--- a/categories/index.html
+++ b/categories/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Categories :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/categories/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/categories/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Categories</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>category ::
-Categories</h1><ul><li><a href=/categories/blog/>Blog</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Categories</h1><ul><li><a href=/categories/blog/>Blog</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/docs/client_monitoring/index.html b/docs/client_monitoring/index.html
index ea6471508af..3a434977d2c 100644
--- a/docs/client_monitoring/index.html
+++ b/docs/client_monitoring/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Client Monitoring :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/client_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/client_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -150,4 +150,4 @@
 queries send few rows but when an event is detected, it probably
 should be escalated.</p></li></ol><p>In either case, Velociraptor itself does not do anything with the
 events collected by default, other than write them to storage. Further
-server side processing is needed using <a href=/docs/server_automation/server_monitoring/>server side event queries</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+server side processing is needed using <a href=/docs/server_automation/server_monitoring/>server side event queries</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/deployment/clients/index.html b/docs/deployment/clients/index.html
index bd268a0b21c..f0a3058ba72 100644
--- a/docs/deployment/clients/index.html
+++ b/docs/deployment/clients/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Deploying Clients :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/deployment/clients/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/deployment/clients/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -236,4 +236,4 @@
 hung). This is OK and part of the upgrade process.</p></div></div><p>To verify that clients are upgraded we recommend running the
 <code>Generic.Client.Info</code> hunt periodically. This hunt will refresh the
 server&rsquo;s datastore of client details (including reporting the client&rsquo;s
-version).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+version).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/deployment/cloud/index.html b/docs/deployment/cloud/index.html
index e1d12791f1b..a80b14c3cb4 100644
--- a/docs/deployment/cloud/index.html
+++ b/docs/deployment/cloud/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Cloud Deployment :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/deployment/cloud/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/deployment/cloud/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -246,4 +246,4 @@
 config file overwrites the old one and the new velociraptor client
 will connect to the new server.</p><p>This method allows the orderly migration of Velociraptor clients from
 an old server to a new server by simply user remote upgrade.</p></div></div><h3 id=reverting-versions>Reverting versions</h3><p>It is generally ok to revert from later versions to earlier versions
-since the migration process is generally non destructive.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+since the migration process is generally non destructive.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/deployment/cloud/multifrontend/index.html b/docs/deployment/cloud/multifrontend/index.html
index 5656b560cd9..708f9179cfc 100644
--- a/docs/deployment/cloud/multifrontend/index.html
+++ b/docs/deployment/cloud/multifrontend/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Multi-Frontend Configuration :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/deployment/cloud/multifrontend/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/deployment/cloud/multifrontend/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -213,4 +213,4 @@
 -rw-rw-r-- 1 mic mic 16347356 Jan  1 06:25 velociraptor_0.6.3-rc1_server_minion_minion.velocidex-training.com-8100.deb
 </code></pre><p>We expect each of these packages to be deployed on their own virtual
 machine instances. Each VM should be built with the same EFS volume
-mounted on <code>/opt/velociraptor</code></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+mounted on <code>/opt/velociraptor</code></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/deployment/index.html b/docs/deployment/index.html
index 324d675b524..35a95c6bf5b 100644
--- a/docs/deployment/index.html
+++ b/docs/deployment/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Deployment :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/deployment/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/deployment/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -103,4 +103,4 @@
 (1)     Velociraptor Team (Velociraptor - Dig deeper!  https
           3072 bit RSA key B22A7FB19CB6CFA1, created: 2021-10-29
 Keys 1-1 of 1 for &quot;0572F28B4EF19A043F4CBBE0B22A7FB19CB6CFA1&quot;.  Enter number(s), N)ext, or Q)uit &gt;
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/deployment/rbac/index.html b/docs/deployment/rbac/index.html
index a251dd5a93e..f7be03040a4 100644
--- a/docs/deployment/rbac/index.html
+++ b/docs/deployment/rbac/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Users and Roles :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/deployment/rbac/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/deployment/rbac/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -81,4 +81,4 @@
 filesystem also makes it easy to integrate with another system (use
 scp or rsync to just copy files around). If files are deleted,
 Velociraptor will just recreate them - it is safe to just remove
-everything!</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+everything!</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/deployment/references/index.html b/docs/deployment/references/index.html
index 626ed911663..8e7e0900aaa 100644
--- a/docs/deployment/references/index.html
+++ b/docs/deployment/references/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Configuration file Reference :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/deployment/references/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/deployment/references/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -459,4 +459,4 @@
 administrators. This additional protection mode helps to mitigate
 the case when a Velociraptor administrator's account is
 compromised. The server can be taken out of lockdown mode by setting
-lockdown to false and restarting the server.</div><li id=lockdown><i class=bullet-placeholder></i><div class=reference-key><a target=_blank href=https://github.com/Velocidex/velociraptor/blob/master/docs/references/server.config.yaml#L1131>lockdown</a></div><a href=#lockdown class=anchorlink><i class="fa fa-copy fa-sm category-icon"></i></a><div class=reference-value-mapping>false</div></li></ul></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+lockdown to false and restarting the server.</div><li id=lockdown><i class=bullet-placeholder></i><div class=reference-key><a target=_blank href=https://github.com/Velocidex/velociraptor/blob/master/docs/references/server.config.yaml#L1131>lockdown</a></div><a href=#lockdown class=anchorlink><i class="fa fa-copy fa-sm category-icon"></i></a><div class=reference-value-mapping>false</div></li></ul></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/deployment/resources/index.html b/docs/deployment/resources/index.html
index 7bf7d6eb8d6..dbcba5bd96c 100644
--- a/docs/deployment/resources/index.html
+++ b/docs/deployment/resources/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Performance :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/deployment/resources/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/deployment/resources/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -168,4 +168,4 @@
 notebooks. You probably do not want to remove these.</p></li><li><p><code>server_artifacts</code> store the results of collection Server Artifacts
 in the GUI.</p></li><li><p><code>users</code> contains information about all GUI users.</p></li></ol><p>The majority of the disk usage appears in the <code>clients</code> directory so
 it is worth aggressively managing that usage.</p><p>In the AWS cloud it is possible to resize disk space dynamically. See <a href=https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/requesting-ebs-volume-modifications.html>Requesting Modifications to Your EBS Volumes
-</a>and <a href=https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/recognize-expanded-volume-linux.html>Extending a Linux File System After Resizing a Volume</a>. You can do this without even restarting the server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</a>and <a href=https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/recognize-expanded-volume-linux.html>Extending a Linux File System After Resizing a Volume</a>. You can do this without even restarting the server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/deployment/self-signed/index.html b/docs/deployment/self-signed/index.html
index b02114b29b1..ef6159c974f 100644
--- a/docs/deployment/self-signed/index.html
+++ b/docs/deployment/self-signed/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Self-Signed SSL :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/deployment/self-signed/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/deployment/self-signed/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -117,4 +117,4 @@
 configuration file and relevant startup scripts.</p><p>Use the following command:</p><pre><code class=language-sh>velociraptor.exe --config server.config.yaml debian server --binary velociraptor-v0.6.0-linux-amd64
 </code></pre><div class="mynotices warning"><div heading=warning><p>The Debian package contains the server configuration file, which contains all required key materials. Make sure the debian file is well protected since a compromise of the file will leak private key material enabling a MITM attack against Velociraptor.</p></div></div><h2 id=install-a-new-server>Install a new server</h2><p>Push the debian package to the server using Secure Copy Protocol (SCP):
 <code>scp velociraptor_server*.deb mike@123.45.67.89:/tmp/</code></p><h2 id=install-the-package>Install the package</h2><p>Run the following command to install the server package:
-<code>sudo dpkg -i velociraptor_*_server.deb</code></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<code>sudo dpkg -i velociraptor_*_server.deb</code></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/deployment/troubleshooting/index.html b/docs/deployment/troubleshooting/index.html
index 4e4d3b1db9f..f521ba0203c 100644
--- a/docs/deployment/troubleshooting/index.html
+++ b/docs/deployment/troubleshooting/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Troubleshooting Deployments :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/deployment/troubleshooting/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/deployment/troubleshooting/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -182,4 +182,4 @@
 us to rotate the certificate.</p><p>Currently there is no way to update the CA certificate without
 redeploying new clients (the CA certificate is embedded in the client
 config file). When generating the config file initially, the CA
-certificate is created with a 10 year validity.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+certificate is created with a 10 year validity.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/extending_vql/index.html b/docs/extending_vql/index.html
index aeae69a86c5..4c41bd4efcc 100644
--- a/docs/extending_vql/index.html
+++ b/docs/extending_vql/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Extending VQL :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/extending_vql/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/extending_vql/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -238,4 +238,4 @@
 can be used directly. Velociraptor will ensure dependent tools are
 present on the endpoint for all dependencies.</p><pre><code class=language-sql>SELECT * FROM Artifact.Windows.Sysinternals.Autoruns()
 WHERE Category =~ &quot;Services&quot; AND `Launch String` =~ &quot;COMSPEC&quot;
-</code></pre></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/forensic/binary/index.html b/docs/forensic/binary/index.html
index 59b9601ea24..c163fc3bb48 100644
--- a/docs/forensic/binary/index.html
+++ b/docs/forensic/binary/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Binary parsing :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/forensic/binary/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/forensic/binary/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -381,4 +381,4 @@
        offset: &quot;x=&gt;x.Offset + 48&quot;,
   }]
 ]],
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/forensic/event_logs/index.html b/docs/forensic/event_logs/index.html
index e12e53a3ca8..50249b5a68b 100644
--- a/docs/forensic/event_logs/index.html
+++ b/docs/forensic/event_logs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Event Logs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/forensic/event_logs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/forensic/event_logs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -134,4 +134,4 @@
 GUID <code>{1C95126E-7EEA-49A9-A3FE-A378B03DDB4D}</code></p><p><figure><img src=image31.png alt="Watching for ETW events in real time" class=captioned><figcaption>Watching for ETW events in real time</figcaption></figure></p><div class="mynotices tip"><div heading=tip><p>ETW and event logs are just two sides of the same coin. If it possible
 to listen to events on the ETW layer before they are forwarded to the
 event log service. In this case the events are not susceptible to
-being stopped by disabling the log (as shown previously)</p></div></div><h2 id=example---use-etw-to-monitor-to-dns-queries>Example - Use ETW to monitor to DNS queries</h2><p>We can query the DNS client ETW provider for all DNS lookup events.</p><p><figure><img src=image32.png alt="Monitor DNS queries via ETW" class=captioned><figcaption>Monitor DNS queries via ETW</figcaption></figure></p><p>Client event monitoring queries automatically forward events to the server.</p><p><figure><img src=image29.png alt="View DNS queries from client monitoring logs" class=captioned><figcaption>View DNS queries from client monitoring logs</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+being stopped by disabling the log (as shown previously)</p></div></div><h2 id=example---use-etw-to-monitor-to-dns-queries>Example - Use ETW to monitor to DNS queries</h2><p>We can query the DNS client ETW provider for all DNS lookup events.</p><p><figure><img src=image32.png alt="Monitor DNS queries via ETW" class=captioned><figcaption>Monitor DNS queries via ETW</figcaption></figure></p><p>Client event monitoring queries automatically forward events to the server.</p><p><figure><img src=image29.png alt="View DNS queries from client monitoring logs" class=captioned><figcaption>View DNS queries from client monitoring logs</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/forensic/evidence_of_execution/index.html b/docs/forensic/evidence_of_execution/index.html
index f843ec4f72e..443747b323a 100644
--- a/docs/forensic/evidence_of_execution/index.html
+++ b/docs/forensic/evidence_of_execution/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Evidence Of Execution :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/forensic/evidence_of_execution/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/forensic/evidence_of_execution/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -119,4 +119,4 @@
 understood or documented it is sometimes possible to work out what
 information is recorded by simple inspection of the database tables.</p><p>Velociraptor already knows how to interpret some of the providers:</p><ul><li><code>{D10CA2FE-6FCF-4F6D-848E-B2E99266FA89}</code> is for application resource usage.</li><li><code>{DD6636C4-8929-4683-974E-22C046A43763}</code> is for network connection stats</li></ul><p>You can collect the SRUM database using the <code>Windows.Forensics.SRUM</code>
 artifact. The artifact contains several sources, each attempting to
-interpret a different provider table.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+interpret a different provider table.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/forensic/filesystem/index.html b/docs/forensic/filesystem/index.html
index 4b0bbea27f7..0847a03ad88 100644
--- a/docs/forensic/filesystem/index.html
+++ b/docs/forensic/filesystem/index.html
@@ -1,7 +1,7 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="One of the most common operations in DFIR is searching for files
 based on their file names.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Searching Filenames :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/forensic/filesystem/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/forensic/filesystem/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -164,4 +164,4 @@
 file plugins with literal string data - this is what the <code>data</code>
 accessor is for - when the data accessor is used, it creates an
 in-memory file with the content of the file being the string that is
-passed as the filename.</p><p>This allows us to use strings in plugins like <code>parse_csv()</code></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+passed as the filename.</p><p>This allows us to use strings in plugins like <code>parse_csv()</code></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/forensic/index.html b/docs/forensic/index.html
index af2d8909427..36828ff8bf8 100644
--- a/docs/forensic/index.html
+++ b/docs/forensic/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Forensic Analysis :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/forensic/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/forensic/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -83,4 +83,4 @@
 Prefetch files Prefetch files are used to keep track of executions</p><h3><a href=/docs/forensic/event_logs/>Event Logs</a></h3><p>Windows Event Logs The Windows event logs are stored in files with extension of *.evtx typically stored within C:\Windows\System32\WinEVT\Logs\*.evtx
 Unlike traditional unix style log files that consist of unstructured text, Windows EVTX files are stored in a binary format with several advantages:
 Rollover - The EVTX file is divided into chunks and new chunks can overwrite older chunks. This allows the file size to be limited, and when the event log fills up, events simply rotate into the start of the file overwriting older events.</p><h3><a href=/docs/forensic/volatile/>Volatile machine state</a></h3><p>Traditional forensic analysis relies on filesystem artifacts. However, one of the best advantages of performing live response is the ability to access the live system&rsquo;s state and uncover volatile indicators that only exist briefly and might change in future.
-Traditionally volatile evidence was acquired using a full memory dump of the running system, and then using a number of memory analysis frameworks to extract some of the types of forensic artifacts we discuss in this page.</p></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+Traditionally volatile evidence was acquired using a full memory dump of the running system, and then using a number of memory analysis frameworks to extract some of the types of forensic artifacts we discuss in this page.</p></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/forensic/ntfs/index.html b/docs/forensic/ntfs/index.html
index 96a3d45dbd0..29ea8c6b1cb 100644
--- a/docs/forensic/ntfs/index.html
+++ b/docs/forensic/ntfs/index.html
@@ -1,6 +1,6 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content="NTFS is the standard Windows filesystem. Velociraptor contains powerful NTFS analysis capabilities.
 "><link rel=icon href=/images/favicon.png type=image/png><title>NTFS Analysis :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/forensic/ntfs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/forensic/ntfs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -238,4 +238,4 @@
 removed. Many files represent evidence of system interaction (such as
 lnk files or prefetch files) and the USN journal can therefore uncover
 the &ldquo;smoking gun&rdquo; when the system was initially compromised.</p><p><figure><img src=image60.png alt="The USN journal" class=captioned><figcaption>The USN journal</figcaption></figure></p><p>You can collect the USN journal using the <code>Windows.Forensics.Usn</code>
-artifact.</p><div class="mynotices tip"><div heading=tip><p>The USN journal contains so much valuable evidence that it might be worth carving for USN records from the raw disk. Although this is a slow process it can yield very good results if your are lucky - see <a href=/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/>this blog post</a> for more information.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+artifact.</p><div class="mynotices tip"><div heading=tip><p>The USN journal contains so much valuable evidence that it might be worth carving for USN records from the raw disk. Although this is a slow process it can yield very good results if your are lucky - see <a href=/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/>this blog post</a> for more information.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/forensic/searching/index.html b/docs/forensic/searching/index.html
index 973c5731947..395bd6fb57a 100644
--- a/docs/forensic/searching/index.html
+++ b/docs/forensic/searching/index.html
@@ -2,7 +2,7 @@
 powerful keyword scanner that allows to search unstructured binary data
 based on user provided rules.
 "><link rel=icon href=/images/favicon.png type=image/png><title>Searching Content :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/forensic/searching/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/forensic/searching/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -146,4 +146,4 @@
 <code>upload()</code> function:</p><pre><code class=language-sql>SELECT upload(file=FullPath) AS Upload
 FROM glob(globs='''C:\Users\*\Downloads\*''')
 WHERE NOT IsDir
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/forensic/volatile/index.html b/docs/forensic/volatile/index.html
index be100ee26ff..64a8ceace8d 100644
--- a/docs/forensic/volatile/index.html
+++ b/docs/forensic/volatile/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Volatile machine state :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/forensic/volatile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/forensic/volatile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -163,4 +163,4 @@
    GROUP BY MappingName
 })
 WHERE MappingName =~ 'winhttp'
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/gui/artifacts/index.html b/docs/gui/artifacts/index.html
index 623b3d27bb9..f36b98ed3d8 100644
--- a/docs/gui/artifacts/index.html
+++ b/docs/gui/artifacts/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Artifacts :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/gui/artifacts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/gui/artifacts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -124,4 +124,4 @@
 both the custom and built in artifact exist in Velociraptor at the
 same time. This allows you to collect either the original or the
 customized version as you please.</p><h2 id=learn-more>Learn more</h2><p>To learn more about how to write your own artifacts click
-<a href=/docs/vql/artifacts//>here</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<a href=/docs/vql/artifacts//>here</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/gui/clients/index.html b/docs/gui/clients/index.html
index 9cfea2eb516..f5ee64ea22b 100644
--- a/docs/gui/clients/index.html
+++ b/docs/gui/clients/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Inspecting clients :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/gui/clients/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/gui/clients/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -168,4 +168,4 @@
 arbitrary shell commands on remote endpoints!</p></div></div><p>You can prevent clients from running arbitrary shell command
 by setting <code>Client.prevent_execve</code> to true. This limits your DFIR
 efficacy because many artifacts depend on being able to launch
-external programs.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+external programs.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/gui/hunting/index.html b/docs/gui/hunting/index.html
index 54dd70eff4d..db9ef97a6b9 100644
--- a/docs/gui/hunting/index.html
+++ b/docs/gui/hunting/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Hunting :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/gui/hunting/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/gui/hunting/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -104,4 +104,4 @@
 collecting a 100Mb file from 10,000 machines results in over 1Tb of
 required storage.</p><p>Be mindful of how much data you will be uploading in total. It is
 always best to use more targeted artifacts that return a few rows per
-endpoint rather than fetch raw files that need to be parsed offline.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+endpoint rather than fetch raw files that need to be parsed offline.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/gui/index.html b/docs/gui/index.html
index 0a92f6343e8..b1fa3e9c1f0 100644
--- a/docs/gui/index.html
+++ b/docs/gui/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>The Admin GUI :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/gui/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/gui/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -83,4 +83,4 @@
 the total number of currently connected clients is shown.</p><div class="mynotices tip"><div heading=tip><p>You can customize the Server Dashboard screen by editing the
 <code>Server.Monitor.Health</code> artifact. The artifact specifies a template
 containing markdown and using the Golang Template Language. You can
-also run arbitrary VQL in dashboards!</p></div></div><h2 id=continue-on-your-tour>Continue on your tour</h2><ul class="children children-li"><li><a href=/docs/gui/clients/>Inspecting clients</a></li><li><a href=/docs/gui/vfs/>The VFS</a></li><li><a href=/docs/gui/artifacts/>Artifacts</a></li><li><a href=/docs/gui/hunting/>Hunting</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+also run arbitrary VQL in dashboards!</p></div></div><h2 id=continue-on-your-tour>Continue on your tour</h2><ul class="children children-li"><li><a href=/docs/gui/clients/>Inspecting clients</a></li><li><a href=/docs/gui/vfs/>The VFS</a></li><li><a href=/docs/gui/artifacts/>Artifacts</a></li><li><a href=/docs/gui/hunting/>Hunting</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/gui/vfs/index.html b/docs/gui/vfs/index.html
index 9e33d05fe14..3726ecf50da 100644
--- a/docs/gui/vfs/index.html
+++ b/docs/gui/vfs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>The VFS :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/gui/vfs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/gui/vfs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -105,4 +105,4 @@
 quickly finding the files and registry keys we are usually interested
 in. One would need to know exactly which files are of interest and
 then click over multiple directories searching for these files.</p><p>To automate collection it is better to write special purpose <code>VQL Artifacts</code> to identity the information of interest.</p><p>Our next section explores what artifacts are and how we collect them
-using Velociraptor.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+using Velociraptor.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/index.html b/docs/index.html
index 8da8214e225..3e899b6cbf3 100644
--- a/docs/index.html
+++ b/docs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Documentation :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item active haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -75,4 +75,4 @@
 used in many different situations, visit our
 <a href=/exchange/>Artifact Exchange</a> to share the artifacts.</p><p>Finally check out the Velociraptor <a href=/blog/>Blog</a> for articles about
 using Velociraptor in different scenarios and to learn more about
-Velociraptor&rsquo;s features.</p><div class="mynotices note"><div heading=" Using Velociraptor integrated with Rapid7 InsightIDR? "><p>Read the <a href=https://docs.rapid7.com/insightidr/velociraptor-alerts>InsightIDR documentation</a> to learn more about how Velociraptor and InsightIDR work together.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+Velociraptor&rsquo;s features.</p><div class="mynotices note"><div heading=" Using Velociraptor integrated with Rapid7 InsightIDR? "><p>Read the <a href=https://docs.rapid7.com/insightidr/velociraptor-alerts>InsightIDR documentation</a> to learn more about how Velociraptor and InsightIDR work together.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/offline_triage/index.html b/docs/offline_triage/index.html
index d909051e7ef..8b5b5644760 100644
--- a/docs/offline_triage/index.html
+++ b/docs/offline_triage/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Triage and acquisition :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/offline_triage/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/offline_triage/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -210,4 +210,4 @@
 more difficult to pivot and dig deeper based on analysis results to
 search for more results. For this reason offline collections tend to
 err on the side of collecting more data rather than being more
-targeted and focused on answering the investigative questions.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+targeted and focused on answering the investigative questions.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/offline_triage/remote_uploads/index.html b/docs/offline_triage/remote_uploads/index.html
index 0ead9c82b1d..fd5b0520cea 100644
--- a/docs/offline_triage/remote_uploads/index.html
+++ b/docs/offline_triage/remote_uploads/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Remote Uploads :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/offline_triage/remote_uploads/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/offline_triage/remote_uploads/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -147,4 +147,4 @@
 granting the ability to download or remove any data. This is ideal for
 embedding in the offline collector.</p><p>The steps required to set up Azure access are:</p><ol><li>Create a storage account.</li><li>Create a new data storage container to receive the uploads</li></ol><p><figure><img src=creating_azure_container.png alt="Creating a new Azure Blob storage container" class=captioned><figcaption>Creating a new Azure Blob storage container</figcaption></figure></p><ol start=3><li>Add a role assignment to allow the storage account to manage the storage</li></ol><p><figure><img src=azure_role_assignment.png alt="Adding a role assignment to the storage account" class=captioned><figcaption>Adding a role assignment to the storage account</figcaption></figure></p><ol start=3><li>Generate a SAS Policy URL.</li></ol><p><figure><img src=generating_sas_policy.png alt="Right click on the container to generate a SAS policy" class=captioned><figcaption>Right click on the container to generate a SAS policy</figcaption></figure></p><ol start=4><li>Create a SAS policy with only write and create access. You can
 specify an appropriate expiry time for the SAS URL. After this time
-the uploader will no longer work.</li></ol><p><figure><img src=sas_policy_details.png alt="SAS Policy should have only Write and Create Access" class=captioned><figcaption>SAS Policy should have only Write and Create Access</figcaption></figure></p><ol start=5><li>Test the SAS URL works properly</li></ol><p><figure><img src=testing_sas_url.png alt="Test the SAS Policy by uploading a small file in the notebook" class=captioned><figcaption>Test the SAS Policy by uploading a small file in the notebook</figcaption></figure></p><ol start=6><li>Embed the SAS URL in the offline collector.</li></ol><p><figure><img src=sas_collector.png alt="Simply paste the SAS URL in the collector GUI" class=captioned><figcaption>Simply paste the SAS URL in the collector GUI</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+the uploader will no longer work.</li></ol><p><figure><img src=sas_policy_details.png alt="SAS Policy should have only Write and Create Access" class=captioned><figcaption>SAS Policy should have only Write and Create Access</figcaption></figure></p><ol start=5><li>Test the SAS URL works properly</li></ol><p><figure><img src=testing_sas_url.png alt="Test the SAS Policy by uploading a small file in the notebook" class=captioned><figcaption>Test the SAS Policy by uploading a small file in the notebook</figcaption></figure></p><ol start=6><li>Embed the SAS URL in the offline collector.</li></ol><p><figure><img src=sas_collector.png alt="Simply paste the SAS URL in the collector GUI" class=captioned><figcaption>Simply paste the SAS URL in the collector GUI</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/overview/history/index.html b/docs/overview/history/index.html
index 39147dc8e10..d91e18a8322 100644
--- a/docs/overview/history/index.html
+++ b/docs/overview/history/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>History :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/overview/history/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/overview/history/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
@@ -108,4 +108,4 @@
 uses much less memory.</p><p>Finally, OSQuery by itself is not sufficient to monitor a large network
 since OSQuery does not include any kind of client/server orchestration
 or GUI. A complete solution requires users to install another tool (such as <a href=https://github.com/fleetdm/fleet>FleetDM</a>) to use
-OSQuery, increasing complexity and management overhead.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+OSQuery, increasing complexity and management overhead.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/overview/index.html b/docs/overview/index.html
index a4d793a453d..fda12463b81 100644
--- a/docs/overview/index.html
+++ b/docs/overview/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor Overview :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/overview/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/overview/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item active haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -76,4 +76,4 @@
 forensic and cyber incident response investigations and data breaches:</p><ul><li>Reconstruct attacker activities through digital forensic analysis</li><li>Hunt for evidence of sophisticated adversaries</li><li>Investigate malware outbreaks and other suspicious network activities</li><li>Monitory continuously for suspicious user activities, such as files
 copied to USB devices</li><li>Discover whether disclosure of confidential information occurred outside the network</li><li>Gather endpoint data over time for use in threat hunting and
 future investigations</li></ul><h2 id=vql---the-velociraptor-difference>VQL - the Velociraptor difference</h2><p>Velociraptor&rsquo;s power and flexibility comes from the Velociraptor Query Language (VQL). VQL is a framework for creating highly customized <strong>artifacts</strong>, which allow you to collect, query, and monitor almost any aspect of an endpoint, groups of endpoints, or an entire network. It can also be used to create continuous monitoring
-rules on the endpoint, as well as automate tasks on the server.</p><p><figure><img src=media/image4.png alt="Rocket Velociraptor" class=captioned><figcaption>Rocket Velociraptor</figcaption></figure></p><h2 id=documentation-overview>Documentation overview</h2><p>The site is divided into the following parts</p><ul><li><p><a href=/docs/deployment/>Deployment</a> where you will learn the different deployment options.</p></li><li><p><a href=/docs/gui/>GUI Tour</a> provides a tour of the user interface.</p></li><li><p><a href=/docs/vql/>VQL Fundamentals</a> provide a deep dive into VQL and how to write your own artifacts and queries.</p></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+rules on the endpoint, as well as automate tasks on the server.</p><p><figure><img src=media/image4.png alt="Rocket Velociraptor" class=captioned><figcaption>Rocket Velociraptor</figcaption></figure></p><h2 id=documentation-overview>Documentation overview</h2><p>The site is divided into the following parts</p><ul><li><p><a href=/docs/deployment/>Deployment</a> where you will learn the different deployment options.</p></li><li><p><a href=/docs/gui/>GUI Tour</a> provides a tour of the user interface.</p></li><li><p><a href=/docs/vql/>VQL Fundamentals</a> provide a deep dive into VQL and how to write your own artifacts and queries.</p></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/overview/support/index.html b/docs/overview/support/index.html
index 5ec6ceb0f1a..bcaf15411da 100644
--- a/docs/overview/support/index.html
+++ b/docs/overview/support/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>The Velociraptor Support Policy :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/overview/support/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/overview/support/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
@@ -167,4 +167,4 @@
 channel</a>, and are all too
 happy to help.</p><p>We also have a mailing list <a href=mailto:velociraptor-discuss@googlegroups.com>velociraptor-discuss@googlegroups.com</a> that
 can be accessed or subscribed to on <a href=https://groups.google.com/g/velociraptor-discuss>Google
-Groups</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+Groups</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/server_automation/index.html b/docs/server_automation/index.html
index 51cc21e4b70..8ce7434dcc6 100644
--- a/docs/server_automation/index.html
+++ b/docs/server_automation/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server Automation :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/server_automation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/server_automation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -146,4 +146,4 @@
 needed.</p></div></div><p>Using selective hunting and post processing can be used to label hosts
 based on any property of grouping that makes sense (e.g. installed
 software, geolocation etc).</p><p>With suitable label groups it is possible to target our hunts on only
-these machines.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+these machines.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/server_automation/server_api/index.html b/docs/server_automation/server_api/index.html
index c27300efb16..932a2e1482c 100644
--- a/docs/server_automation/server_api/index.html
+++ b/docs/server_automation/server_api/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>The Velociraptor API :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/server_automation/server_api/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/server_automation/server_api/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -206,4 +206,4 @@
 collected, inspect its results, and upload them to further processing
 to an external system or escalate alerts for example.</p><p>The API connection will simply block until an event occurs allowing
 you to create a fully automated pipeline based off Velociraptor
-collections, hunts etc.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+collections, hunts etc.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/server_automation/server_monitoring/index.html b/docs/server_automation/server_monitoring/index.html
index a2f68487626..f290b8adbb9 100644
--- a/docs/server_automation/server_monitoring/index.html
+++ b/docs/server_automation/server_monitoring/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server Monitoring :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/server_automation/server_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/server_automation/server_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -151,4 +151,4 @@
 all clients and written to the server.</p></li><li><p>Next we configure a server artifact (from the <code>Server Events</code>
 screen) to monitor all client events and identify the encoded
 powershell commands.</p></li><li><p>The encoded PowerShell commands will be generated as rows from the
-<code>Server.Powershell.EncodedCommand</code> server artifact.</p></li></ol><p>Now we are able to decode encoded powershell command lines</p><p><figure><img src=decoded_powershell.png alt="Decoding powershell commands" class=captioned><figcaption>Decoding powershell commands</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<code>Server.Powershell.EncodedCommand</code> server artifact.</p></li></ol><p>Now we are able to decode encoded powershell command lines</p><p><figure><img src=decoded_powershell.png alt="Decoding powershell commands" class=captioned><figcaption>Decoding powershell commands</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/vql/artifacts/index.html b/docs/vql/artifacts/index.html
index d90dc7646bf..667ede084bb 100644
--- a/docs/vql/artifacts/index.html
+++ b/docs/vql/artifacts/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Artifacts :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/vql/artifacts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/vql/artifacts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -144,4 +144,4 @@
 these to the client for evaluation. We never rely on the artifact
 definitions embedded in the client itself - instead we always send the
 compiled VQL to the client. This allows us to upgrade artifact
-definitions on the server without needing to update the client itself.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+definitions on the server without needing to update the client itself.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/vql/events/index.html b/docs/vql/events/index.html
index f35dd2d32fe..21c43c7c6c3 100644
--- a/docs/vql/events/index.html
+++ b/docs/vql/events/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Event Queries :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/vql/events/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/vql/events/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -98,4 +98,4 @@
 along. Of course the query will not complete by itself, only when it
 hits the notebook&rsquo;s 10 Minute timeout or the user clicks the <code>Stop</code>
 <i class="fas fa-stop"></i> button.</p><p><figure><img src=image65.png alt="The Clock plugin generates a row every second by default" class=captioned><figcaption>The Clock plugin generates a row every second by default</figcaption></figure></p><p>To learn more about how Velociraptor uses event queries to monitor
-events on endpoints, see <a href=/docs/client_monitoring/>Client Monitoring</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+events on endpoints, see <a href=/docs/client_monitoring/>Client Monitoring</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/vql/index.html b/docs/vql/index.html
index 58795f2a59a..8ef6298bb3d 100644
--- a/docs/vql/index.html
+++ b/docs/vql/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>VQL Fundamentals :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/vql/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/vql/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -446,4 +446,4 @@
 GROUP BY X
 </code></pre><p>Aggregate functions are used to calculate values that consider
 multiple rows.</p><p>Some aggregate functions:</p><ul><li><code>count()</code> counts the total number of rows in each bin.</li><li><code>sum()</code> adds up a value for an expression in each bin.</li><li><code>enumerate()</code> collect all the values in each bin into an in-memory array.</li><li><code>rate()</code> calculates a rate (first order derivative) between each
-invocation and its previous one.</li></ul><p>These can be seen in the query below.</p><p><figure><img src=image70.png alt="Aggregate functions" class=captioned><figcaption>Aggregate functions</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+invocation and its previous one.</li></ul><p>These can be seen in the query below.</p><p><figure><img src=image70.png alt="Aggregate functions" class=captioned><figcaption>Aggregate functions</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/docs/vql/notebooks/index.html b/docs/vql/notebooks/index.html
index 5ebb9e3b44f..6f7c7c8dda1 100644
--- a/docs/vql/notebooks/index.html
+++ b/docs/vql/notebooks/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Notebooks :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/vql/notebooks/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/docs/vql/notebooks/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item parent haschildren"><div><i class="fa fa-angle-down fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -100,4 +100,4 @@
 each hunt and a <code>flow notebook</code> for each collection. Let&rsquo;s see this
 feature in action. I will collect the <code>Windows.Timeline.Prefetch</code>
 artifact that will build a timeline of the prefetch files on the
-endpoint.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+endpoint.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifact_exchange.zip b/exchange/artifact_exchange.zip
index 3f1a7a560c2..a8ba7d6ecb6 100644
Binary files a/exchange/artifact_exchange.zip and b/exchange/artifact_exchange.zip differ
diff --git a/exchange/artifact_exchange_v2.zip b/exchange/artifact_exchange_v2.zip
index 005eef5e481..d58ccee8288 100644
Binary files a/exchange/artifact_exchange_v2.zip and b/exchange/artifact_exchange_v2.zip differ
diff --git a/exchange/artifacts/Server.Import.WatchLocalDirectory.yaml b/exchange/artifacts/Server.Import.WatchLocalDirectory.yaml
new file mode 100644
index 00000000000..3adac377503
--- /dev/null
+++ b/exchange/artifacts/Server.Import.WatchLocalDirectory.yaml
@@ -0,0 +1,26 @@
+name: Server.Import.WatchLocalDirectory
+description: |
+   This is an artifact that will monitor a local path for collections, 
+   which it will then ingest. 
+
+type: SERVER_EVENT
+
+parameters:
+   - name: WatchDir
+     default: "/tmp/watch/*.zip"
+
+sources:
+  - query: |
+        SELECT * FROM foreach(
+            row={
+                SELECT * FROM diff(
+                    query={
+                        SELECT OSPath FROM glob(globs=WatchDir)
+                    }, period=3, key="OSPath"
+                )
+                WHERE Diff =~ "added"
+            }, query={
+                SELECT *, import_collection(filename=OSPath), OSPath 
+                FROM scope()
+            }
+        )
diff --git a/exchange/artifacts/Server.Import.WatchS3Directory.yaml b/exchange/artifacts/Server.Import.WatchS3Directory.yaml
new file mode 100644
index 00000000000..e2c21589f78
--- /dev/null
+++ b/exchange/artifacts/Server.Import.WatchS3Directory.yaml
@@ -0,0 +1,48 @@
+name: Server.Import.WatchS3Directory
+description: |
+   This is an artifact that will monitor an S3 path for collections, 
+   which it will then ingest. 
+
+# Can be CLIENT, CLIENT_EVENT, SERVER, SERVER_EVENT
+type: SERVER_EVENT
+
+parameters:
+   - name: WatchDir
+     default: "/velociraptor/*.zip"
+
+   - name: Endpoint
+     default: 'http://127.0.0.1:9000/'
+     
+   - name: Key
+     default: 'admin'
+     
+   - name: Secret
+     default: 'password'
+     
+   - name: Region
+     default: 'us-east-1'
+
+sources:
+  - query: |
+        LET S3_CREDENTIALS <= dict(
+            endpoint=Endpoint, 
+            credentials_key=Key, 
+            credentials_secret=Secret,
+            region=Region,
+            no_verify_cert=1)
+        SELECT * FROM foreach(
+            row={
+                SELECT * FROM diff(
+                    query={
+                        SELECT OSPath FROM glob(globs=WatchDir, accessor="s3")
+                    }, period=3, key="OSPath"
+                )
+                WHERE Diff =~ "added"
+            }, query={
+                SELECT *, import_collection(
+                    filename=OSPath,
+                    accessor="s3"
+                ),  OSPath 
+                FROM scope()
+            }
+        )
diff --git a/exchange/artifacts/Windows.Sys.BitLocker.yaml b/exchange/artifacts/Windows.Sys.BitLocker.yaml
new file mode 100644
index 00000000000..6b9794753c9
--- /dev/null
+++ b/exchange/artifacts/Windows.Sys.BitLocker.yaml
@@ -0,0 +1,32 @@
+name: Windows.Sys.BitLocker
+author: Zane Gittins
+description: |
+   This artifact gets all Bitlocker volumes using PowerShell, including the recovery password.
+
+# Can be CLIENT, CLIENT_EVENT, SERVER, SERVER_EVENT
+type: CLIENT
+
+sources:
+  - precondition:
+      SELECT OS From info() where OS = 'windows'
+
+    query: |
+        LET PowershellScript = '''$Results = @()
+        $BitlockerVolumes = Get-BitLockerVolume
+        $BitlockerVolumes |
+        ForEach-Object {
+            $RecoveryKey = [string]($_.KeyProtector).RecoveryPassword
+            # Only add results with valid recovery keys.
+            if ($RecoveryKey.Length -gt 5) {
+                $_ | Add-Member -MemberType NoteProperty -Name "RecoveryPassword" -Value $RecoveryKey
+                $Results += $_
+            }
+        }
+        return ($Results | ConvertTo-Json)'''
+        SELECT * FROM foreach(
+          row={
+            SELECT Stdout FROM execve(argv=["Powershell", "-ExecutionPolicy",
+                "unrestricted", "-c", PowershellScript], length=1000000)
+          }, query={
+            SELECT * FROM parse_json_array(data=Stdout)
+        })
diff --git a/exchange/artifacts/pages/activedirectoryprivilegedusers/index.html b/exchange/artifacts/pages/activedirectoryprivilegedusers/index.html
index 7157adf0dfa..1cd58e05bc9 100644
--- a/exchange/artifacts/pages/activedirectoryprivilegedusers/index.html
+++ b/exchange/artifacts/pages/activedirectoryprivilegedusers/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.ActiveDirectory.PrivilegedUsers :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/activedirectoryprivilegedusers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/activedirectoryprivilegedusers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -149,4 +149,4 @@
           FROM scope()
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/amsi/index.html b/exchange/artifacts/pages/amsi/index.html
index 8e997dbc7eb..6447f895f88 100644
--- a/exchange/artifacts/pages/amsi/index.html
+++ b/exchange/artifacts/pages/amsi/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.ETW.AMSI :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/amsi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/amsi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -128,4 +128,4 @@
             then= NOT Content =~ WhitelistRegex,
             else= True)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/ateranetworks/index.html b/exchange/artifacts/pages/ateranetworks/index.html
index bde3293a363..b534deece11 100644
--- a/exchange/artifacts/pages/ateranetworks/index.html
+++ b/exchange/artifacts/pages/ateranetworks/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.AteraNetworks :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/ateranetworks/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/ateranetworks/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -105,4 +105,4 @@
   - name: Modified
     type: timestamp
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/backuprestore/index.html b/exchange/artifacts/pages/backuprestore/index.html
index 186f4a6501e..8114970fd3a 100644
--- a/exchange/artifacts/pages/backuprestore/index.html
+++ b/exchange/artifacts/pages/backuprestore/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.BackupRestore :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/backuprestore/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/backuprestore/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -103,4 +103,4 @@
       WHERE NOT KeyType ='key'
       GROUP BY ModTime, KeyName,KeyValue,KeyType
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/binaryversion/index.html b/exchange/artifacts/pages/binaryversion/index.html
index 6c293bba369..75b23b3ac35 100644
--- a/exchange/artifacts/pages/binaryversion/index.html
+++ b/exchange/artifacts/pages/binaryversion/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.BinaryVersion :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/binaryversion/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/binaryversion/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -125,4 +125,4 @@
       FROM hits
       WHERE PE OR Authenticode OR MFTAllocated = 'false'
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/bitsadmin/index.html b/exchange/artifacts/pages/bitsadmin/index.html
index 68e1a439ad7..20be8c2e6d3 100644
--- a/exchange/artifacts/pages/bitsadmin/index.html
+++ b/exchange/artifacts/pages/bitsadmin/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.Bitsadmin :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/bitsadmin/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/bitsadmin/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -134,4 +134,4 @@
 
       SELECT * FROM results
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/bootapplication/index.html b/exchange/artifacts/pages/bootapplication/index.html
index 670f2409713..f7f5bdd9ea8 100644
--- a/exchange/artifacts/pages/bootapplication/index.html
+++ b/exchange/artifacts/pages/bootapplication/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.UEFI.BootApplication :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/bootapplication/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/bootapplication/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -203,4 +203,4 @@
         FROM if(condition=AllParsedTCGLog, 
             then= results )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/brc4/index.html b/exchange/artifacts/pages/brc4/index.html
index 24c2aea70eb..4a27a93a5ad 100644
--- a/exchange/artifacts/pages/brc4/index.html
+++ b/exchange/artifacts/pages/brc4/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Carving.BRc4 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/brc4/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/brc4/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -229,4 +229,4 @@
                 then= FileConfiguration,
                 else= ProcessConfiguration))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/bulkfile/index.html b/exchange/artifacts/pages/bulkfile/index.html
index e2c858e5cff..265f9777619 100644
--- a/exchange/artifacts/pages/bulkfile/index.html
+++ b/exchange/artifacts/pages/bulkfile/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Bulk.File :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/bulkfile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/bulkfile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -158,4 +158,4 @@
             then= upload_hits,
             else= hits)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/bumblebee/index.html b/exchange/artifacts/pages/bumblebee/index.html
index 0b09fc40c97..e3ebd4b1a89 100644
--- a/exchange/artifacts/pages/bumblebee/index.html
+++ b/exchange/artifacts/pages/bumblebee/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Carving.BumbleBee :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/bumblebee/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/bumblebee/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -148,4 +148,4 @@
         -- Output the command and control servers
         SELECT ProcessName, CommandLine, Pid, str(str=g1) AS BumbleBeeC2 FROM CommandandControlServers
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/condensedaccountusage/index.html b/exchange/artifacts/pages/condensedaccountusage/index.html
index 76b6a9f286f..428cd15ecdc 100644
--- a/exchange/artifacts/pages/condensedaccountusage/index.html
+++ b/exchange/artifacts/pages/condensedaccountusage/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.CondensedAccountUsage :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/condensedaccountusage/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/condensedaccountusage/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -219,4 +219,4 @@
         AND NOT UserName = expand(path='%ComputerName%$')
         AND NOT DomainName =~ '^(NT AUTHORITY|FONT DRIVER HOST|WINDOW MANAGER)$'
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/confluencelogs/index.html b/exchange/artifacts/pages/confluencelogs/index.html
index e524bd9aeec..5deb29b5dd1 100644
--- a/exchange/artifacts/pages/confluencelogs/index.html
+++ b/exchange/artifacts/pages/confluencelogs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Detection.ConfluenceLogs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/confluencelogs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/confluencelogs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -131,4 +131,4 @@
            SELECT * FROM hits        
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/custom.windows.mobaxterm.passwords/index.html b/exchange/artifacts/pages/custom.windows.mobaxterm.passwords/index.html
index c25258b40c0..e52d7f9f7b5 100644
--- a/exchange/artifacts/pages/custom.windows.mobaxterm.passwords/index.html
+++ b/exchange/artifacts/pages/custom.windows.mobaxterm.passwords/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.MobaXterm.Passwords :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/custom.windows.mobaxterm.passwords/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/custom.windows.mobaxterm.passwords/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -92,4 +92,4 @@
         SELECT Data.value as EncryptedCreds, FullPath, ModTime
         FROM glob(globs=SearchRegistryGlob, accessor='reg')
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/custom.windows.winscp.passwords/index.html b/exchange/artifacts/pages/custom.windows.winscp.passwords/index.html
index a361b8b6ffa..3c99a9516ef 100644
--- a/exchange/artifacts/pages/custom.windows.winscp.passwords/index.html
+++ b/exchange/artifacts/pages/custom.windows.winscp.passwords/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.WinSCP.Passwords :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/custom.windows.winscp.passwords/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/custom.windows.winscp.passwords/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -92,4 +92,4 @@
         SELECT Data.value as ObfuscatedPassword, FullPath, ModTime
         FROM glob(globs=SearchRegistryGlob, accessor='reg')
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/cve_2021_40444/index.html b/exchange/artifacts/pages/cve_2021_40444/index.html
index 5b790580954..ecc97f453cb 100644
--- a/exchange/artifacts/pages/cve_2021_40444/index.html
+++ b/exchange/artifacts/pages/cve_2021_40444/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.CVE_2021_40444 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/cve_2021_40444/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/cve_2021_40444/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -206,4 +206,4 @@
         FROM glob(globs=SearchRegistryGlob, accessor='registry')
         WHERE Data.type = 'DWORD'
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/cyberchefserver/index.html b/exchange/artifacts/pages/cyberchefserver/index.html
index 132cb8ec1f5..083bcdf4359 100644
--- a/exchange/artifacts/pages/cyberchefserver/index.html
+++ b/exchange/artifacts/pages/cyberchefserver/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Analysis.CyberChefServer :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/cyberchefserver/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/cyberchefserver/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -138,4 +138,4 @@
     - |
         SELECT * FROM BakedData
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/cylance/index.html b/exchange/artifacts/pages/cylance/index.html
index 845ea480ff5..3bf1f7bbd1b 100644
--- a/exchange/artifacts/pages/cylance/index.html
+++ b/exchange/artifacts/pages/cylance/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.Cylance :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/cylance/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/cylance/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -184,4 +184,4 @@
                 })
            })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/defenderconfig/index.html b/exchange/artifacts/pages/defenderconfig/index.html
index 6adde4a0010..3bbb8b45d45 100644
--- a/exchange/artifacts/pages/defenderconfig/index.html
+++ b/exchange/artifacts/pages/defenderconfig/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.DefenderConfig :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/defenderconfig/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/defenderconfig/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -121,4 +121,4 @@
         AND RegKey=~ KeyRegex AND KeyName=~NameRegex AND KeyValue=~ValueRegex
       ORDER BY RegKey
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/defenderdhparser/index.html b/exchange/artifacts/pages/defenderdhparser/index.html
index d75ee53446e..6d25a17e0b8 100644
--- a/exchange/artifacts/pages/defenderdhparser/index.html
+++ b/exchange/artifacts/pages/defenderdhparser/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.DefenderDHParser :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/defenderdhparser/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/defenderdhparser/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -119,4 +119,4 @@
                 FROM read_file(filenames=FullPath)
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/defenderquarantineextract/index.html b/exchange/artifacts/pages/defenderquarantineextract/index.html
index 97d8afd7fba..754a7cac97b 100644
--- a/exchange/artifacts/pages/defenderquarantineextract/index.html
+++ b/exchange/artifacts/pages/defenderquarantineextract/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.DefenderQuarantineExtract :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/defenderquarantineextract/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/defenderquarantineextract/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -132,4 +132,4 @@
              }) as Upload
         FROM TempQuery
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/deleteclientlabel/index.html b/exchange/artifacts/pages/deleteclientlabel/index.html
index 9257d03c40a..fb8fedbff8b 100644
--- a/exchange/artifacts/pages/deleteclientlabel/index.html
+++ b/exchange/artifacts/pages/deleteclientlabel/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.DeleteClientLabel :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/deleteclientlabel/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/deleteclientlabel/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -140,4 +140,4 @@
             } AS really_do_it
         FROM to_remove
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/detection.application.cursedchrome/index.html b/exchange/artifacts/pages/detection.application.cursedchrome/index.html
index 10493c91fad..e555e7eaf0c 100644
--- a/exchange/artifacts/pages/detection.application.cursedchrome/index.html
+++ b/exchange/artifacts/pages/detection.application.cursedchrome/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Detection.Application.CursedChrome :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/detection.application.cursedchrome/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/detection.application.cursedchrome/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -136,4 +136,4 @@
 
 
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/detectraptor/index.html b/exchange/artifacts/pages/detectraptor/index.html
index cab0f610ee6..af5c742196d 100644
--- a/exchange/artifacts/pages/detectraptor/index.html
+++ b/exchange/artifacts/pages/detectraptor/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Import.DetectRaptor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/detectraptor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/detectraptor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -192,4 +192,4 @@
         SHA1
       FROM set_artifacts
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/diec/index.html b/exchange/artifacts/pages/diec/index.html
index fb318f5b31c..c0f741926e5 100644
--- a/exchange/artifacts/pages/diec/index.html
+++ b/exchange/artifacts/pages/diec/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.DIEC :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/diec/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/diec/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -154,4 +154,4 @@
                 FROM ExecDIEC
             })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/exchange.label.user/index.html b/exchange/artifacts/pages/exchange.label.user/index.html
index fa767a8d5c2..5119912d984 100644
--- a/exchange/artifacts/pages/exchange.label.user/index.html
+++ b/exchange/artifacts/pages/exchange.label.user/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Exchange.Label.User :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/exchange.label.user/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/exchange.label.user/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -111,4 +111,4 @@
 
         SELECT * FROM foreach(row=user_flows, query=results)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/exchange.server.enrichment.gimphash/index.html b/exchange/artifacts/pages/exchange.server.enrichment.gimphash/index.html
index 7fe698d3794..41df11a2a9d 100644
--- a/exchange/artifacts/pages/exchange.server.enrichment.gimphash/index.html
+++ b/exchange/artifacts/pages/exchange.server.enrichment.gimphash/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Exchange.Server.Enrichment.Gimphash :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/exchange.server.enrichment.gimphash/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/exchange.server.enrichment.gimphash/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -100,4 +100,4 @@
                         GH.FullPath[0], File])
         SELECT grok(grok=("%{DATA:gimphash} %{GREEDYDATA:file}"), data=Stdout).file AS File, grok(grok=("%{DATA:gimphash} %{GREEDYDATA:file}"), data=Stdout).gimphash AS Gimphash FROM ExecGH 
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/exports/index.html b/exchange/artifacts/pages/exports/index.html
index 241e3baa67e..4648ab909a6 100644
--- a/exchange/artifacts/pages/exports/index.html
+++ b/exchange/artifacts/pages/exports/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Binary.Exports :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/exports/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/exports/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -113,4 +113,4 @@
             then=all_binary_info,
             else=binary_exports)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/filezilla/index.html b/exchange/artifacts/pages/filezilla/index.html
index beebaa2f6f3..fe8758617d7 100644
--- a/exchange/artifacts/pages/filezilla/index.html
+++ b/exchange/artifacts/pages/filezilla/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.FileZilla :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/filezilla/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/filezilla/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -211,4 +211,4 @@
             FROM sqlite(file=OSPath, query=queueSQLQuery)
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/findflows/index.html b/exchange/artifacts/pages/findflows/index.html
index f15f55b872a..73a050b8db2 100644
--- a/exchange/artifacts/pages/findflows/index.html
+++ b/exchange/artifacts/pages/findflows/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Findflows :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/findflows/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/findflows/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -179,4 +179,4 @@
   - name: FlowNotebook
     type: url
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/ftkimager/index.html b/exchange/artifacts/pages/ftkimager/index.html
index aa1bf029018..ae8b46082d8 100644
--- a/exchange/artifacts/pages/ftkimager/index.html
+++ b/exchange/artifacts/pages/ftkimager/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.FTKImager :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/ftkimager/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/ftkimager/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -124,4 +124,4 @@
             "\\\\.\\PHYSICALDRIVE" + SourceDriveToImage,
             OutputPath])
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/generic.collection.uac/index.html b/exchange/artifacts/pages/generic.collection.uac/index.html
index d700aab416f..60fec48bd2b 100644
--- a/exchange/artifacts/pages/generic.collection.uac/index.html
+++ b/exchange/artifacts/pages/generic.collection.uac/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Collection.UAC :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/generic.collection.uac/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/generic.collection.uac/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -131,4 +131,4 @@
 # 2023-02-19: v1.0 released
 #   - Initial release.
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/generic.detection.lunaseclog4shell/index.html b/exchange/artifacts/pages/generic.detection.lunaseclog4shell/index.html
index 1dcf09fa4ff..64f33dd8353 100644
--- a/exchange/artifacts/pages/generic.detection.lunaseclog4shell/index.html
+++ b/exchange/artifacts/pages/generic.detection.lunaseclog4shell/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Detection.LunasecLog4shell :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/generic.detection.lunaseclog4shell/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/generic.detection.lunaseclog4shell/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -144,4 +144,4 @@
       SELECT * FROM foreach(row= results,
         query={ SELECT * FROM record })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/generic.forensics.cylr/index.html b/exchange/artifacts/pages/generic.forensics.cylr/index.html
index 2d2be315f17..85fadb75ea0 100644
--- a/exchange/artifacts/pages/generic.forensics.cylr/index.html
+++ b/exchange/artifacts/pages/generic.forensics.cylr/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Forensics.CyLR :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/generic.forensics.cylr/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/generic.forensics.cylr/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -115,4 +115,4 @@
       // Upload the forensic file and report additional data.
       SELECT upload(file=logFile) AS LogFile, upload(file=fullOutputFile) AS ForensicFile FROM scope()
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/genericmonitor/index.html b/exchange/artifacts/pages/genericmonitor/index.html
index df6bd437e0c..ec48b1a8c8e 100644
--- a/exchange/artifacts/pages/genericmonitor/index.html
+++ b/exchange/artifacts/pages/genericmonitor/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Alerts.GenericMonitor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/genericmonitor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/genericmonitor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -87,4 +87,4 @@
   - query: |
         SELECT * from watch_monitoring(artifact=ArtifactName)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/globremediation/index.html b/exchange/artifacts/pages/globremediation/index.html
index 5b0fb90202f..97c1377e592 100644
--- a/exchange/artifacts/pages/globremediation/index.html
+++ b/exchange/artifacts/pages/globremediation/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Remediation.Glob :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/globremediation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/globremediation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -110,4 +110,4 @@
             then= delete_targets,
             else= { SELECT *, FALSE as Removed FROM targets } )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/hash_run_keys/index.html b/exchange/artifacts/pages/hash_run_keys/index.html
index 7e28057abe4..6268022b513 100644
--- a/exchange/artifacts/pages/hash_run_keys/index.html
+++ b/exchange/artifacts/pages/hash_run_keys/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>HashRunKeys :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/hash_run_keys/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/hash_run_keys/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -118,4 +118,4 @@
                hash(path=expand(path=RealPath)).SHA256 AS Hash
       FROM normalized
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/hiddenusers/index.html b/exchange/artifacts/pages/hiddenusers/index.html
index 467ab4788dc..fce8741e087 100644
--- a/exchange/artifacts/pages/hiddenusers/index.html
+++ b/exchange/artifacts/pages/hiddenusers/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.HiddenUsers :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/hiddenusers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/hiddenusers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -116,4 +116,4 @@
   - name: Modified
     type: timestamp
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/hollowshunter/index.html b/exchange/artifacts/pages/hollowshunter/index.html
index 7521ba0bca4..42b049e84ce 100644
--- a/exchange/artifacts/pages/hollowshunter/index.html
+++ b/exchange/artifacts/pages/hollowshunter/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Memory.HollowsHunter :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/hollowshunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/hollowshunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -111,4 +111,4 @@
       SELECT upload(file=FullPath) AS Upload
       FROM glob(globs="*", root=TempDir)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/hvci/index.html b/exchange/artifacts/pages/hvci/index.html
index 127fe2a4d9f..428daa046ba 100644
--- a/exchange/artifacts/pages/hvci/index.html
+++ b/exchange/artifacts/pages/hvci/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.HVCI :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/hvci/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/hvci/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -112,4 +112,4 @@
                 else= True )
       GROUP BY KeyName, KeyValue, KeyType
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/idatloader/index.html b/exchange/artifacts/pages/idatloader/index.html
index 4eeda88e7e2..d084cdb37f7 100644
--- a/exchange/artifacts/pages/idatloader/index.html
+++ b/exchange/artifacts/pages/idatloader/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.IdatLoader :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/idatloader/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/idatloader/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -325,4 +325,4 @@
   - name: HitContext
     type: preview_upload
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/injectedthreadex/index.html b/exchange/artifacts/pages/injectedthreadex/index.html
index 5ed108a2ee4..2a3071f020c 100644
--- a/exchange/artifacts/pages/injectedthreadex/index.html
+++ b/exchange/artifacts/pages/injectedthreadex/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Memory.InjectedThreadEx :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/injectedthreadex/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/injectedthreadex/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -223,4 +223,4 @@
   - name: ThreadStartTime
     type: timestamp
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/ipcheck.virustotal/index.html b/exchange/artifacts/pages/ipcheck.virustotal/index.html
index 14d70c73fc8..fc8ea0201b1 100644
--- a/exchange/artifacts/pages/ipcheck.virustotal/index.html
+++ b/exchange/artifacts/pages/ipcheck.virustotal/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>IPCheck.Virustotal :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/ipcheck.virustotal/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/ipcheck.virustotal/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -140,4 +140,4 @@
             VTData AS _Data
         FROM Data
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/iris.sync.asset/index.html b/exchange/artifacts/pages/iris.sync.asset/index.html
index f726be7e05d..d5678b139c1 100644
--- a/exchange/artifacts/pages/iris.sync.asset/index.html
+++ b/exchange/artifacts/pages/iris.sync.asset/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>IRIS.Sync.Asset :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/iris.sync.asset/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/iris.sync.asset/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -312,4 +312,4 @@
                 apiRequestIrisAdd.applyLabels[0].`addMetadata(assetIdValue=format(format="%v", args=parse_json(data=Content).data.asset_id))`[0].`client_metadata(client_id=clientId)`.IRIS_AssetId as IRIS_AssetId,
                 apiRequestIrisAdd as _rawEvent FROM addAsset})
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/iris.timeline.add/index.html b/exchange/artifacts/pages/iris.timeline.add/index.html
index 88edafe194b..45cea655421 100644
--- a/exchange/artifacts/pages/iris.timeline.add/index.html
+++ b/exchange/artifacts/pages/iris.timeline.add/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>IRIS.Timeline.Add :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/iris.timeline.add/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/iris.timeline.add/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -298,4 +298,4 @@
                     parse_json(data=Content).data as EventProperties
                     FROM apiRequestIrisAddEvent})
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/iseautosave/index.html b/exchange/artifacts/pages/iseautosave/index.html
index e77818bc4e5..3137cbe5d82 100644
--- a/exchange/artifacts/pages/iseautosave/index.html
+++ b/exchange/artifacts/pages/iseautosave/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.Powershell.ISEAutoSave :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/iseautosave/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/iseautosave/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -128,4 +128,4 @@
             WHERE OSPath =~ 'user.config$'
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/kace_sw_process/index.html b/exchange/artifacts/pages/kace_sw_process/index.html
index a9f9a9ad2fe..1684f0d65f5 100644
--- a/exchange/artifacts/pages/kace_sw_process/index.html
+++ b/exchange/artifacts/pages/kace_sw_process/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.KACE_SW_Process :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/kace_sw_process/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/kace_sw_process/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -130,4 +130,4 @@
                                 else= False)
             })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/killprocess/index.html b/exchange/artifacts/pages/killprocess/index.html
index eff8980be3d..064928300ae 100644
--- a/exchange/artifacts/pages/killprocess/index.html
+++ b/exchange/artifacts/pages/killprocess/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Remediation.KillProcess :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/killprocess/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/killprocess/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -118,4 +118,4 @@
             FROM execve(argv=["taskkill", "/PID", Pid, "/T", "/F"])
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/knockknock/index.html b/exchange/artifacts/pages/knockknock/index.html
index 959ffc1d464..3a13728b55d 100644
--- a/exchange/artifacts/pages/knockknock/index.html
+++ b/exchange/artifacts/pages/knockknock/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Forensics.KnockKnock :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/knockknock/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/knockknock/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -237,4 +237,4 @@
             row=results.KnockKnockResults.`System Extensions`,
             query={SELECT * FROM foreach(row=_value)} )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/label.domaincontroller/index.html b/exchange/artifacts/pages/label.domaincontroller/index.html
index d993528ba02..67ac0875e52 100644
--- a/exchange/artifacts/pages/label.domaincontroller/index.html
+++ b/exchange/artifacts/pages/label.domaincontroller/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Label.DomainController :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/label.domaincontroller/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/label.domaincontroller/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -111,4 +111,4 @@
 
         SELECT * FROM foreach(row=completions, query=matches)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.applications.wgethsts/index.html b/exchange/artifacts/pages/linux.applications.wgethsts/index.html
index 5ef3559038c..e1cf37b9c29 100644
--- a/exchange/artifacts/pages/linux.applications.wgethsts/index.html
+++ b/exchange/artifacts/pages/linux.applications.wgethsts/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Applications.WgetHSTS :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.applications.wgethsts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.applications.wgethsts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -104,4 +104,4 @@
   - name: Created
     type: timestamp
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.carving.sshlogs/index.html b/exchange/artifacts/pages/linux.carving.sshlogs/index.html
index 8eb4c0c6f94..6a8dd98f17f 100644
--- a/exchange/artifacts/pages/linux.carving.sshlogs/index.html
+++ b/exchange/artifacts/pages/linux.carving.sshlogs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Carving.SSHLogs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.carving.sshlogs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.carving.sshlogs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -126,4 +126,4 @@
         })
 
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.collection.autoruns/index.html b/exchange/artifacts/pages/linux.collection.autoruns/index.html
index c1a56945ca2..7436427e045 100644
--- a/exchange/artifacts/pages/linux.collection.autoruns/index.html
+++ b/exchange/artifacts/pages/linux.collection.autoruns/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Collection.Autoruns :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.autoruns/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.autoruns/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -179,4 +179,4 @@
            upload(file=OSPath) AS Upload
     FROM glob(globs=parse_json_array(data=XDGAutostartEntries))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.collection.browserextensions/index.html b/exchange/artifacts/pages/linux.collection.browserextensions/index.html
index 42a0207b67f..94dd246a912 100644
--- a/exchange/artifacts/pages/linux.collection.browserextensions/index.html
+++ b/exchange/artifacts/pages/linux.collection.browserextensions/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Collection.BrowserExtensions :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.browserextensions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.browserextensions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -154,4 +154,4 @@
            upload(file=OSPath) AS Upload
     FROM glob(globs=parse_json_array(data=FirefoxAddOns))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.collection.browserhistory/index.html b/exchange/artifacts/pages/linux.collection.browserhistory/index.html
index c70634268a4..c87ffe978f7 100644
--- a/exchange/artifacts/pages/linux.collection.browserhistory/index.html
+++ b/exchange/artifacts/pages/linux.collection.browserhistory/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Collection.BrowserHistory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.browserhistory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.browserhistory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -153,4 +153,4 @@
            upload(file=OSPath) AS Upload
     FROM glob(globs=parse_json_array(data=OperaHistoryFile))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.collection.catscale/index.html b/exchange/artifacts/pages/linux.collection.catscale/index.html
index 9ece067a5b9..fbf3e76baec 100644
--- a/exchange/artifacts/pages/linux.collection.catscale/index.html
+++ b/exchange/artifacts/pages/linux.collection.catscale/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Collection.CatScale :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.catscale/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.catscale/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -127,4 +127,4 @@
                      ])
         SELECT upload(accessor="file", file=TarFile) AS Upload FROM RunIt
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.collection.dbconfig/index.html b/exchange/artifacts/pages/linux.collection.dbconfig/index.html
index 6c41ede8910..f994697acb0 100644
--- a/exchange/artifacts/pages/linux.collection.dbconfig/index.html
+++ b/exchange/artifacts/pages/linux.collection.dbconfig/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Collection.DBConfig :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.dbconfig/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.dbconfig/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -200,4 +200,4 @@
            upload(file=OSPath) AS Upload
     FROM glob(globs=parse_json_array(data=RedisLogFiles))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.collection.historyfiles/index.html b/exchange/artifacts/pages/linux.collection.historyfiles/index.html
index 827d6b25ae4..45a017cd625 100644
--- a/exchange/artifacts/pages/linux.collection.historyfiles/index.html
+++ b/exchange/artifacts/pages/linux.collection.historyfiles/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Collection.History :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.historyfiles/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.historyfiles/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -188,4 +188,4 @@
            upload(file=OSPath) AS Upload
     FROM glob(globs=NanoHistoryFile)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.collection.networkconfig/index.html b/exchange/artifacts/pages/linux.collection.networkconfig/index.html
index 4ab398d434b..b964f4600ab 100644
--- a/exchange/artifacts/pages/linux.collection.networkconfig/index.html
+++ b/exchange/artifacts/pages/linux.collection.networkconfig/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Collection.NetworkConfig :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.networkconfig/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.networkconfig/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -213,4 +213,4 @@
            upload(file=OSPath) AS Upload
     FROM stat(filename=UnixHostsFile)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.collection.sysconfig/index.html b/exchange/artifacts/pages/linux.collection.sysconfig/index.html
index 403b3a16f67..b024c2bdce8 100644
--- a/exchange/artifacts/pages/linux.collection.sysconfig/index.html
+++ b/exchange/artifacts/pages/linux.collection.sysconfig/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Collection.SysConfig :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.sysconfig/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.sysconfig/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -660,4 +660,4 @@
            upload(file=OSPath) AS Upload
     FROM glob(globs=parse_json_array(data=YumSources))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.collection.syslogs/index.html b/exchange/artifacts/pages/linux.collection.syslogs/index.html
index 50e992541be..a4603d80446 100644
--- a/exchange/artifacts/pages/linux.collection.syslogs/index.html
+++ b/exchange/artifacts/pages/linux.collection.syslogs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Collection.SysLogs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.syslogs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.syslogs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -249,4 +249,4 @@
            upload(file=OSPath) AS Upload
     FROM glob(globs=parse_json_array(data=UnixUtmpFile))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.collection.userconfig/index.html b/exchange/artifacts/pages/linux.collection.userconfig/index.html
index fd6536d2974..251b196203a 100644
--- a/exchange/artifacts/pages/linux.collection.userconfig/index.html
+++ b/exchange/artifacts/pages/linux.collection.userconfig/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Collection.UserConfig :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.userconfig/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.collection.userconfig/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -260,4 +260,4 @@
            upload(file=OSPath) AS Upload
     FROM glob(globs=parse_json_array(data=ZShellConfigurationFile))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.debian.gpgkeys/index.html b/exchange/artifacts/pages/linux.debian.gpgkeys/index.html
index 0ee98f6b082..a1030d8967c 100644
--- a/exchange/artifacts/pages/linux.debian.gpgkeys/index.html
+++ b/exchange/artifacts/pages/linux.debian.gpgkeys/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Debian.GPGKeys :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.debian.gpgkeys/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.debian.gpgkeys/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -230,4 +230,4 @@
 
         SELECT * FROM GPGKeys
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.detection.cve20214034/index.html b/exchange/artifacts/pages/linux.detection.cve20214034/index.html
index 005f4fd7393..f98088a8bd9 100644
--- a/exchange/artifacts/pages/linux.detection.cve20214034/index.html
+++ b/exchange/artifacts/pages/linux.detection.cve20214034/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Detection.CVE20214034 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.detection.cve20214034/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.detection.cve20214034/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -117,4 +117,4 @@
            WHERE Line =~ "pkexec.+The value for environment variable XAUTHORITY contains suscipious content"
        })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.detection.incorrectpermissions/index.html b/exchange/artifacts/pages/linux.detection.incorrectpermissions/index.html
index 94f36ab57e0..0602867d0e9 100644
--- a/exchange/artifacts/pages/linux.detection.incorrectpermissions/index.html
+++ b/exchange/artifacts/pages/linux.detection.incorrectpermissions/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Detection.IncorrectPermissions :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.detection.incorrectpermissions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.detection.incorrectpermissions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -349,4 +349,4 @@
         GROUP BY OSPath
         ORDER BY OSPath
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.detection.memfd/index.html b/exchange/artifacts/pages/linux.detection.memfd/index.html
index ffed0cead4d..18944fd23dc 100644
--- a/exchange/artifacts/pages/linux.detection.memfd/index.html
+++ b/exchange/artifacts/pages/linux.detection.memfd/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Detection.MemFD :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.detection.memfd/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.detection.memfd/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -100,4 +100,4 @@
   query: |
     SELECT * FROM glob(globs=FileNameGlob, accessor='file') WHERE Data.Link =~ SearchRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.detection.sshkeyfilecmd/index.html b/exchange/artifacts/pages/linux.detection.sshkeyfilecmd/index.html
index a9282bfbbcd..72fa460b55c 100644
--- a/exchange/artifacts/pages/linux.detection.sshkeyfilecmd/index.html
+++ b/exchange/artifacts/pages/linux.detection.sshkeyfilecmd/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Detection.SSHKeyFileCmd :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.detection.sshkeyfilecmd/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.detection.sshkeyfilecmd/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -108,4 +108,4 @@
           }
       )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.detection.vrealizeloginsightexploitation/index.html b/exchange/artifacts/pages/linux.detection.vrealizeloginsightexploitation/index.html
index 74e7d9a0f5f..2868c0b7e98 100644
--- a/exchange/artifacts/pages/linux.detection.vrealizeloginsightexploitation/index.html
+++ b/exchange/artifacts/pages/linux.detection.vrealizeloginsightexploitation/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Detection.vRealizeLogInsightExploitation :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.detection.vrealizeloginsightexploitation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.detection.vrealizeloginsightexploitation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -118,4 +118,4 @@
         Record.FileName AS FileName
       FROM results
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.forensics.recentlyused/index.html b/exchange/artifacts/pages/linux.forensics.recentlyused/index.html
index cee21750a0a..1d9f28b7806 100644
--- a/exchange/artifacts/pages/linux.forensics.recentlyused/index.html
+++ b/exchange/artifacts/pages/linux.forensics.recentlyused/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Forensics.RecentlyUsed :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.forensics.recentlyused/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.forensics.recentlyused/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -119,4 +119,4 @@
             FROM items(item=parse_xml(file=FullPath).xbel.bookmark)
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.kunai/index.html b/exchange/artifacts/pages/linux.kunai/index.html
index b9d2ece3eeb..450cc1fc7c8 100644
--- a/exchange/artifacts/pages/linux.kunai/index.html
+++ b/exchange/artifacts/pages/linux.kunai/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Exchange.Linux.Kunai :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.kunai/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.kunai/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -101,4 +101,4 @@
         info.parent_task AS ParentTask
       FROM parse_jsonl(filename=LogFile)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.loganalysis.chopchopgo/index.html b/exchange/artifacts/pages/linux.loganalysis.chopchopgo/index.html
index 7dbfb7d0c1a..2072bdfa3a9 100644
--- a/exchange/artifacts/pages/linux.loganalysis.chopchopgo/index.html
+++ b/exchange/artifacts/pages/linux.loganalysis.chopchopgo/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.LogAnalysis.ChopChopGo :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.loganalysis.chopchopgo/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.loganalysis.chopchopgo/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -130,4 +130,4 @@
                     ID
                 FROM parse_json_array(data=Stdout)})
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.memory.avml/index.html b/exchange/artifacts/pages/linux.memory.avml/index.html
index 09407ca990d..633cbd4a04c 100644
--- a/exchange/artifacts/pages/linux.memory.avml/index.html
+++ b/exchange/artifacts/pages/linux.memory.avml/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Memory.AVML :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.memory.avml/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.memory.avml/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -105,4 +105,4 @@
             FROM execve(argv=[OSPath, Tempfile], sep="\r\n")
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.network.netstat/index.html b/exchange/artifacts/pages/linux.network.netstat/index.html
index a136386aadd..c50da8b2ecf 100644
--- a/exchange/artifacts/pages/linux.network.netstat/index.html
+++ b/exchange/artifacts/pages/linux.network.netstat/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Network.Netstat :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.network.netstat/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.network.netstat/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -145,4 +145,4 @@
         WHERE sl =~ ":"  -- Remove header row
           AND State =~ StateRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.network.nm.connections/index.html b/exchange/artifacts/pages/linux.network.nm.connections/index.html
index d8ae8205529..86cbd7ca088 100644
--- a/exchange/artifacts/pages/linux.network.nm.connections/index.html
+++ b/exchange/artifacts/pages/linux.network.nm.connections/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Network.NM.Connections :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.network.nm.connections/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.network.nm.connections/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -360,4 +360,4 @@
             WHERE _UUID=UUID
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.privilegeescalationdetection/index.html b/exchange/artifacts/pages/linux.privilegeescalationdetection/index.html
index 6183fd4a6e1..35578be0e48 100644
--- a/exchange/artifacts/pages/linux.privilegeescalationdetection/index.html
+++ b/exchange/artifacts/pages/linux.privilegeescalationdetection/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.PrivilegeEscalationDetection :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.privilegeescalationdetection/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.privilegeescalationdetection/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -128,4 +128,4 @@
         AND Username =~ "root"
         AND Parent.Username != Username
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.remediation.quarantine/index.html b/exchange/artifacts/pages/linux.remediation.quarantine/index.html
index bda58302fd7..1dd2bdbf5e0 100644
--- a/exchange/artifacts/pages/linux.remediation.quarantine/index.html
+++ b/exchange/artifacts/pages/linux.remediation.quarantine/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Remediation.Quarantine :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.remediation.quarantine/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.remediation.quarantine/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -189,4 +189,4 @@
           else=log(message="Iptables not found. Only Iptables-based quarantine is supported for Linux hosts at this time.")
       ) AS Quarantine FROM scope()
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.sys.apthistory/index.html b/exchange/artifacts/pages/linux.sys.apthistory/index.html
index d1acb442869..8dd8f86b8ae 100644
--- a/exchange/artifacts/pages/linux.sys.apthistory/index.html
+++ b/exchange/artifacts/pages/linux.sys.apthistory/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Sys.APTHistory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.sys.apthistory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.sys.apthistory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -102,4 +102,4 @@
       FROM parse_records_with_regex(accessor="gzip",file=OSPath, regex='''(?sm)^(?P&lt;Record&gt;Start-Date:.+?)\n\n''')
       SELECT * FROM foreach(row=APTHistoryList,query=ParseRecords)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.sys.journalctl/index.html b/exchange/artifacts/pages/linux.sys.journalctl/index.html
index 271011d70fc..ee8c6418bb5 100644
--- a/exchange/artifacts/pages/linux.sys.journalctl/index.html
+++ b/exchange/artifacts/pages/linux.sys.journalctl/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Sys.JournalCtl :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.sys.journalctl/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.sys.journalctl/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -111,4 +111,4 @@
         ParsedOutput.__CURSOR AS Cursor
       FROM foreach(row={SELECT parse_json(data=Stdout) AS ParsedOutput FROM JCtlOut WHERE Stdout})
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.sys.systemdtimer/index.html b/exchange/artifacts/pages/linux.sys.systemdtimer/index.html
index e2b862f8d87..fe196a60f92 100644
--- a/exchange/artifacts/pages/linux.sys.systemdtimer/index.html
+++ b/exchange/artifacts/pages/linux.sys.systemdtimer/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Sys.SystemdTimer :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.sys.systemdtimer/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.sys.systemdtimer/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -92,4 +92,4 @@
       - |
         SELECT *, read_file(filename=OSPath) FROM glob(globs=split(string=TimerLocation, sep=","))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.sysinternals.sysmon/index.html b/exchange/artifacts/pages/linux.sysinternals.sysmon/index.html
index eb8083fa103..61ed922c6fc 100644
--- a/exchange/artifacts/pages/linux.sysinternals.sysmon/index.html
+++ b/exchange/artifacts/pages/linux.sysinternals.sysmon/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Sysinternals.Sysmon :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.sysinternals.sysmon/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.sysinternals.sysmon/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -129,4 +129,4 @@
             AND if(condition=EndDate, then=TimeCreated &lt;= timestamp(string=EndDate), else=true)
             AND str(str=EventID) =~ IDRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.sysinternals.sysmonevent/index.html b/exchange/artifacts/pages/linux.sysinternals.sysmonevent/index.html
index 42b609440c8..1b098bf405e 100644
--- a/exchange/artifacts/pages/linux.sysinternals.sysmonevent/index.html
+++ b/exchange/artifacts/pages/linux.sysinternals.sysmonevent/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Sysinternals.SysmonEvent :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.sysinternals.sysmonevent/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.sysinternals.sysmonevent/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -107,4 +107,4 @@
            Event.EventData AS EventData
          FROM ParsedEvents
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.system.bashlogout/index.html b/exchange/artifacts/pages/linux.system.bashlogout/index.html
index 8e1c891aa39..4c30f779d40 100644
--- a/exchange/artifacts/pages/linux.system.bashlogout/index.html
+++ b/exchange/artifacts/pages/linux.system.bashlogout/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.System.BashLogout :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.system.bashlogout/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.system.bashlogout/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -104,4 +104,4 @@
       FROM foreach(row=BashLogoutList)
       WHERE Content =~ ContentFilter
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linux.system.pam/index.html b/exchange/artifacts/pages/linux.system.pam/index.html
index 981f11057b2..3f13c09eac5 100644
--- a/exchange/artifacts/pages/linux.system.pam/index.html
+++ b/exchange/artifacts/pages/linux.system.pam/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.System.PAM :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.system.pam/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linux.system.pam/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -130,4 +130,4 @@
                             AND NOT Record =~ '^#' 
                             AND NOT Record = ''})
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/linuxmemoryacquisition/index.html b/exchange/artifacts/pages/linuxmemoryacquisition/index.html
index 6403b343311..385a2c25ef5 100644
--- a/exchange/artifacts/pages/linuxmemoryacquisition/index.html
+++ b/exchange/artifacts/pages/linuxmemoryacquisition/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Memory.Acquisition :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linuxmemoryacquisition/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/linuxmemoryacquisition/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -132,4 +132,4 @@
             )
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/log4jrce/index.html b/exchange/artifacts/pages/log4jrce/index.html
index 7b3855a9412..c32567689d4 100644
--- a/exchange/artifacts/pages/log4jrce/index.html
+++ b/exchange/artifacts/pages/log4jrce/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Detection.log4jRCE :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/log4jrce/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/log4jrce/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -389,4 +389,4 @@
         then=upload_hits,
         else=hits)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/log4jvulnhunter/index.html b/exchange/artifacts/pages/log4jvulnhunter/index.html
index 890efc36b56..e7c646e4b30 100644
--- a/exchange/artifacts/pages/log4jvulnhunter/index.html
+++ b/exchange/artifacts/pages/log4jvulnhunter/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Detection.Log4jVulnHunter :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/log4jvulnhunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/log4jvulnhunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -344,4 +344,4 @@
         then=upload_hits,
         else=hits)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.applications.cache/index.html b/exchange/artifacts/pages/macos.applications.cache/index.html
index a7c74b4a959..cf327c92866 100644
--- a/exchange/artifacts/pages/macos.applications.cache/index.html
+++ b/exchange/artifacts/pages/macos.applications.cache/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Applications.Cache :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.applications.cache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.applications.cache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -115,4 +115,4 @@
           }
       )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.applications.firefox.history/index.html b/exchange/artifacts/pages/macos.applications.firefox.history/index.html
index e806a70e81a..56e113e032d 100644
--- a/exchange/artifacts/pages/macos.applications.firefox.history/index.html
+++ b/exchange/artifacts/pages/macos.applications.firefox.history/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Applications.Firefox.History :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.applications.firefox.history/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.applications.firefox.history/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -109,4 +109,4 @@
              query=urlSQLQuery)
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.applications.knowledgec/index.html b/exchange/artifacts/pages/macos.applications.knowledgec/index.html
index 98c43517b27..e7c131e908e 100644
--- a/exchange/artifacts/pages/macos.applications.knowledgec/index.html
+++ b/exchange/artifacts/pages/macos.applications.knowledgec/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Applications.KnowledgeC :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.applications.knowledgec/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.applications.knowledgec/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -139,4 +139,4 @@
         `EXPIRATION DATE` AS ExpirationDate
       FROM foreach(row=KCDBList,query=KCDBAppActivities)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.applications.networkusage/index.html b/exchange/artifacts/pages/macos.applications.networkusage/index.html
index 199eeed3608..a2462ba0754 100644
--- a/exchange/artifacts/pages/macos.applications.networkusage/index.html
+++ b/exchange/artifacts/pages/macos.applications.networkusage/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Applications.NetworkUsage :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.applications.networkusage/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.applications.networkusage/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -130,4 +130,4 @@
         `ZLIVEUSAGE TABLE ID` AS LiveUsageTableID
       FROM foreach(row=NetUsageList,query=NetUsageDetails)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.applications.notes/index.html b/exchange/artifacts/pages/macos.applications.notes/index.html
index e16dbeb73f5..28d8a9b8a17 100644
--- a/exchange/artifacts/pages/macos.applications.notes/index.html
+++ b/exchange/artifacts/pages/macos.applications.notes/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Applications.Notes :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.applications.notes/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.applications.notes/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -171,4 +171,4 @@
              if(condition=UploadFiles,then=if(condition=AttachmentLocation, then=upload(file=AttachmentLocation))) AS Upload
       FROM foreach(row=NotesList, query=NotesDetails)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.applications.safari.downloads/index.html b/exchange/artifacts/pages/macos.applications.safari.downloads/index.html
index 3f09ac37540..3a97f269336 100644
--- a/exchange/artifacts/pages/macos.applications.safari.downloads/index.html
+++ b/exchange/artifacts/pages/macos.applications.safari.downloads/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Applications.Safari.Downloads :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.applications.safari.downloads/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.applications.safari.downloads/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -112,4 +112,4 @@
           FROM DownloadsGlob
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.applications.safari.history/index.html b/exchange/artifacts/pages/macos.applications.safari.history/index.html
index 84227082aa6..1bfeb5ec487 100644
--- a/exchange/artifacts/pages/macos.applications.safari.history/index.html
+++ b/exchange/artifacts/pages/macos.applications.safari.history/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Applications.Safari.History :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.applications.safari.history/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.applications.safari.history/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -117,4 +117,4 @@
         FROM history_db
             })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.applications.savedstate/index.html b/exchange/artifacts/pages/macos.applications.savedstate/index.html
index 35371693c56..3f7368b9ba9 100644
--- a/exchange/artifacts/pages/macos.applications.savedstate/index.html
+++ b/exchange/artifacts/pages/macos.applications.savedstate/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Applications.SavedState :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.applications.savedstate/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.applications.savedstate/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -124,4 +124,4 @@
       WHERE Name =~ NameFilter
       AND _User =~ UserFilter
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.collection.aftermath/index.html b/exchange/artifacts/pages/macos.collection.aftermath/index.html
index 4949de537d5..dd313658147 100644
--- a/exchange/artifacts/pages/macos.collection.aftermath/index.html
+++ b/exchange/artifacts/pages/macos.collection.aftermath/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Collection.Aftermath :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.collection.aftermath/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.collection.aftermath/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -111,4 +111,4 @@
                      ]) 
         SELECT upload(accessor="file", file=grok(data=Stdout,grok=["Aftermath archive moved to %{DATA:File}.zip"]).File + '.zip') AS Upload FROM if(condition=Analyze, then=AnalyzeIt, else=RunIt)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.files.filemonitor/index.html b/exchange/artifacts/pages/macos.files.filemonitor/index.html
index d6e4720af27..04d675b6335 100644
--- a/exchange/artifacts/pages/macos.files.filemonitor/index.html
+++ b/exchange/artifacts/pages/macos.files.filemonitor/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Files.FileMonitor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.files.filemonitor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.files.filemonitor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -134,4 +134,4 @@
             AND str(str=UID) =~ UserIdRegex
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.forensics.fsevents/index.html b/exchange/artifacts/pages/macos.forensics.fsevents/index.html
index 5935c0ba60e..11de7a3bfff 100644
--- a/exchange/artifacts/pages/macos.forensics.fsevents/index.html
+++ b/exchange/artifacts/pages/macos.forensics.fsevents/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Forensics.FSEvents :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.forensics.fsevents/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.forensics.fsevents/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -165,4 +165,4 @@
       })
       WHERE path =~ PathRegex AND flags =~ FlagsRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.logs.macmonitor/index.html b/exchange/artifacts/pages/macos.logs.macmonitor/index.html
index 7a6430ce4ec..7047e7f5853 100644
--- a/exchange/artifacts/pages/macos.logs.macmonitor/index.html
+++ b/exchange/artifacts/pages/macos.logs.macmonitor/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Logs.MacMonitor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.logs.macmonitor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.logs.macmonitor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -116,4 +116,4 @@
         WHERE ProcessName =~ ProcessRegex AND 
         InitiatingProcessName =~ InitiatingProcessRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.network.applicationlayerfirewall/index.html b/exchange/artifacts/pages/macos.network.applicationlayerfirewall/index.html
index 50710522735..c9df96c020e 100644
--- a/exchange/artifacts/pages/macos.network.applicationlayerfirewall/index.html
+++ b/exchange/artifacts/pages/macos.network.applicationlayerfirewall/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Network.ApplicationLayerFirewall :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.network.applicationlayerfirewall/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.network.applicationlayerfirewall/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -99,4 +99,4 @@
         firewall AS Applications
       FROM plist(file=ALFGlob)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.network.bluetooth/index.html b/exchange/artifacts/pages/macos.network.bluetooth/index.html
index 22abab3172a..4470d110572 100644
--- a/exchange/artifacts/pages/macos.network.bluetooth/index.html
+++ b/exchange/artifacts/pages/macos.network.bluetooth/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Network.Bluetooth :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.network.bluetooth/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.network.bluetooth/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -111,4 +111,4 @@
           }
       )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.network.dhcp/index.html b/exchange/artifacts/pages/macos.network.dhcp/index.html
index ab9c3af5ec8..3d315be9d3b 100644
--- a/exchange/artifacts/pages/macos.network.dhcp/index.html
+++ b/exchange/artifacts/pages/macos.network.dhcp/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Network.DHCP :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.network.dhcp/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.network.dhcp/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -117,4 +117,4 @@
                 FROM LeaseList
             })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.network.littlesnitch/index.html b/exchange/artifacts/pages/macos.network.littlesnitch/index.html
index d64df827fcf..84978ef5a8b 100644
--- a/exchange/artifacts/pages/macos.network.littlesnitch/index.html
+++ b/exchange/artifacts/pages/macos.network.littlesnitch/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Network.LittleSnitch :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.network.littlesnitch/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.network.littlesnitch/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -132,4 +132,4 @@
             parentAppExecutable AS `Parent`
         FROM parse_csv(filename=LittleSnitchLogs.FullPath)})
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.network.recentwifinetworks/index.html b/exchange/artifacts/pages/macos.network.recentwifinetworks/index.html
index b9c5bd2deaa..3a9614fc4f6 100644
--- a/exchange/artifacts/pages/macos.network.recentwifinetworks/index.html
+++ b/exchange/artifacts/pages/macos.network.recentwifinetworks/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Network.RecentWifiNetworks :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.network.recentwifinetworks/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.network.recentwifinetworks/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -117,4 +117,4 @@
              Value AS _Data
       FROM EachNetwork
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.parallelsvm.suspendedmemory/index.html b/exchange/artifacts/pages/macos.parallelsvm.suspendedmemory/index.html
index f48f167cea3..883a98f8d2a 100644
--- a/exchange/artifacts/pages/macos.parallelsvm.suspendedmemory/index.html
+++ b/exchange/artifacts/pages/macos.parallelsvm.suspendedmemory/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.ParallelsVM.SuspendedMemory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.parallelsvm.suspendedmemory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.parallelsvm.suspendedmemory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -111,4 +111,4 @@
             WHERE FullPath =~ ".*\.mem$"
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.sys.automator/index.html b/exchange/artifacts/pages/macos.sys.automator/index.html
index fece407867e..6aa88b69a10 100644
--- a/exchange/artifacts/pages/macos.sys.automator/index.html
+++ b/exchange/artifacts/pages/macos.sys.automator/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Sys.Automator :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.sys.automator/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.sys.automator/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -152,4 +152,4 @@
           }
       )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.sys.bashhistory/index.html b/exchange/artifacts/pages/macos.sys.bashhistory/index.html
index 0364c833717..908cba690d1 100644
--- a/exchange/artifacts/pages/macos.sys.bashhistory/index.html
+++ b/exchange/artifacts/pages/macos.sys.bashhistory/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.Sys.BashHistory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.sys.bashhistory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.sys.bashhistory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -133,4 +133,4 @@
           AND NOT if(condition= WhitelistRegex, then= Line =~ WhitelistRegex, else= FALSE)
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.system.locationservices/index.html b/exchange/artifacts/pages/macos.system.locationservices/index.html
index ef2fb9b5185..d257e64081a 100644
--- a/exchange/artifacts/pages/macos.system.locationservices/index.html
+++ b/exchange/artifacts/pages/macos.system.locationservices/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.System.LocationServices :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.system.locationservices/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.system.locationservices/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -106,4 +106,4 @@
         App AS _Data
       FROM SepApps
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.system.man/index.html b/exchange/artifacts/pages/macos.system.man/index.html
index df9f2be0e3a..a155fe15ec7 100644
--- a/exchange/artifacts/pages/macos.system.man/index.html
+++ b/exchange/artifacts/pages/macos.system.man/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.System.Man :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.system.man/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.system.man/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -109,4 +109,4 @@
       WHERE Line =~ '^(MAN|WHATIS||)PAGER' 
       AND NOT Line =~ "/usr/bin/less|/usr/bin/more" })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.system.mounteddiskimages/index.html b/exchange/artifacts/pages/macos.system.mounteddiskimages/index.html
index 097d8139d72..03178822005 100644
--- a/exchange/artifacts/pages/macos.system.mounteddiskimages/index.html
+++ b/exchange/artifacts/pages/macos.system.mounteddiskimages/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.System.MountedDiskImages :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.system.mounteddiskimages/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.system.mounteddiskimages/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -84,4 +84,4 @@
                _value AS ImageDetails
         FROM items(item=plist(accessor="data", file=MountedDMGs.Stdout).images)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.unifiedloghunter/index.html b/exchange/artifacts/pages/macos.unifiedloghunter/index.html
index 95a51e097a7..63c22554af0 100644
--- a/exchange/artifacts/pages/macos.unifiedloghunter/index.html
+++ b/exchange/artifacts/pages/macos.unifiedloghunter/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.UnifiedLogHunter :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.unifiedloghunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.unifiedloghunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -248,4 +248,4 @@
         get(member="timezoneName") AS _TimezoneName
       FROM foreach(row=Raw.Stdout, query={SELECT * FROM parse_json_array(data=_value)})
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macos.unifiedlogparser/index.html b/exchange/artifacts/pages/macos.unifiedlogparser/index.html
index e9283bb7aaf..014499e698b 100644
--- a/exchange/artifacts/pages/macos.unifiedlogparser/index.html
+++ b/exchange/artifacts/pages/macos.unifiedlogparser/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>MacOS.UnifiedLogParser :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.unifiedlogparser/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macos.unifiedlogparser/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -103,4 +103,4 @@
       LET RunULP &lt;= SELECT * FROM execve(argv=["./" + basename(path=ULP.FullPath[0])], cwd=dirname(path=ULP.FullPath[0]))
       SELECT * FROM parse_csv(accessor="file", filename=dirname(path=ULP.FullPath[0]) + "/output.csv")
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/macroraptor/index.html b/exchange/artifacts/pages/macroraptor/index.html
index cd6f354599c..46abecbce21 100644
--- a/exchange/artifacts/pages/macroraptor/index.html
+++ b/exchange/artifacts/pages/macroraptor/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.OfficeMacros.MacroRaptor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macroraptor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/macroraptor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -152,4 +152,4 @@
             then= { SELECT * FROM upload_results},
             else= { SELECT * FROM results})
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/magicweb/index.html b/exchange/artifacts/pages/magicweb/index.html
index 81b8cc91f84..f6f33d8acb9 100644
--- a/exchange/artifacts/pages/magicweb/index.html
+++ b/exchange/artifacts/pages/magicweb/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.MagicWeb :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/magicweb/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/magicweb/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -144,4 +144,4 @@
         then= upload_binaries,
         else= binaries )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/malfind/index.html b/exchange/artifacts/pages/malfind/index.html
index 4ea1a2af2bb..909eb416f97 100644
--- a/exchange/artifacts/pages/malfind/index.html
+++ b/exchange/artifacts/pages/malfind/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.Malfind :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/malfind/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/malfind/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -372,4 +372,4 @@
   - name: SectionData
     type: base64hex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/manageenginelog/index.html b/exchange/artifacts/pages/manageenginelog/index.html
index 6d207c41691..ece5d95b40b 100644
--- a/exchange/artifacts/pages/manageenginelog/index.html
+++ b/exchange/artifacts/pages/manageenginelog/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Generic.Detection.ManageEngineLog :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/manageenginelog/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/manageenginelog/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -129,4 +129,4 @@
                                         NumberOfHits=9999,
                                         UploadHits=UploadHits)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/moveit/index.html b/exchange/artifacts/pages/moveit/index.html
index ded53816268..84281474598 100644
--- a/exchange/artifacts/pages/moveit/index.html
+++ b/exchange/artifacts/pages/moveit/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.MoveIt :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/moveit/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/moveit/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -357,4 +357,4 @@
   - name: EventTime
     type: timestamp
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/moveitevtx/index.html b/exchange/artifacts/pages/moveitevtx/index.html
index 7e9389e08d7..daa8cc29723 100644
--- a/exchange/artifacts/pages/moveitevtx/index.html
+++ b/exchange/artifacts/pages/moveitevtx/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.MoveIt :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/moveitevtx/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/moveitevtx/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -151,4 +151,4 @@
                         SearchVSS=SearchVSS )
 
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/msdtfollina/index.html b/exchange/artifacts/pages/msdtfollina/index.html
index ed53ac073bc..00ba55cfc9d 100644
--- a/exchange/artifacts/pages/msdtfollina/index.html
+++ b/exchange/artifacts/pages/msdtfollina/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.MsdtFollina :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/msdtfollina/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/msdtfollina/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -115,4 +115,4 @@
         read_file(filename=FullPath) as Content
       FROM Artifact.Generic.Detection.Yara.Glob(PathGlob=TargetGlob,YaraRule=MsdtYara)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/ntdsutil/index.html b/exchange/artifacts/pages/ntdsutil/index.html
index 17ca06b98f1..f96a8013026 100644
--- a/exchange/artifacts/pages/ntdsutil/index.html
+++ b/exchange/artifacts/pages/ntdsutil/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.Ntdsutil :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/ntdsutil/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/ntdsutil/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -101,4 +101,4 @@
         IocRegex='ntds\.dit',
         SearchVSS=TargetVSS)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/officeservercache/index.html b/exchange/artifacts/pages/officeservercache/index.html
index 8815794fc2e..7ef19010361 100644
--- a/exchange/artifacts/pages/officeservercache/index.html
+++ b/exchange/artifacts/pages/officeservercache/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.OfficeServerCache :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/officeservercache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/officeservercache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -126,4 +126,4 @@
                                 else= False)
             })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/onenote/index.html b/exchange/artifacts/pages/onenote/index.html
index 9a6805829b7..e82d9b248e7 100644
--- a/exchange/artifacts/pages/onenote/index.html
+++ b/exchange/artifacts/pages/onenote/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.Onenote :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/onenote/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/onenote/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -243,4 +243,4 @@
   - name: EmbeddedPreview
     type: base64hex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/powerefficiencydiagnostics/index.html b/exchange/artifacts/pages/powerefficiencydiagnostics/index.html
index dc34caccaf4..fcbe95434b4 100644
--- a/exchange/artifacts/pages/powerefficiencydiagnostics/index.html
+++ b/exchange/artifacts/pages/powerefficiencydiagnostics/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.PowerEfficiencyDiagnostics :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/powerefficiencydiagnostics/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/powerefficiencydiagnostics/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -124,4 +124,4 @@
             })
         WHERE ProcessName
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/powerpickhostversion/index.html b/exchange/artifacts/pages/powerpickhostversion/index.html
index e17b9eafc72..c28ec6d1745 100644
--- a/exchange/artifacts/pages/powerpickhostversion/index.html
+++ b/exchange/artifacts/pages/powerpickhostversion/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Alert.Windows.EVTX.PowerPickHostVersion :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/powerpickhostversion/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/powerpickhostversion/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -132,4 +132,4 @@
             FROM watch_evtx(filename=pseventLog)
             WHERE EventID = 400 AND Message =~ 'HostVersion=1.0'
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/powershellmonitoring/index.html b/exchange/artifacts/pages/powershellmonitoring/index.html
index 983e2e68183..ca5ce66f55a 100644
--- a/exchange/artifacts/pages/powershellmonitoring/index.html
+++ b/exchange/artifacts/pages/powershellmonitoring/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.ETW.Powershell :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/powershellmonitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/powershellmonitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -209,4 +209,4 @@
             LIMIT 1 -- limts to 1 row per IocCsv entry.
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/prefetchhunter/index.html b/exchange/artifacts/pages/prefetchhunter/index.html
index 8a952ce1311..083347884b6 100644
--- a/exchange/artifacts/pages/prefetchhunter/index.html
+++ b/exchange/artifacts/pages/prefetchhunter/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.PrefetchHunter :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/prefetchhunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/prefetchhunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -136,4 +136,4 @@
         GROUP BY Executable,FileAccessed,Binary
  
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/printerdriver/index.html b/exchange/artifacts/pages/printerdriver/index.html
index b2e3058bcc9..6d4f0840570 100644
--- a/exchange/artifacts/pages/printerdriver/index.html
+++ b/exchange/artifacts/pages/printerdriver/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.PrinterDriver :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/printerdriver/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/printerdriver/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -124,4 +124,4 @@
             })
       GROUP BY lowcase(string=Binary)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/printnightmare/index.html b/exchange/artifacts/pages/printnightmare/index.html
index eab6721479e..62b6c364372 100644
--- a/exchange/artifacts/pages/printnightmare/index.html
+++ b/exchange/artifacts/pages/printnightmare/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.PrintNightmare :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/printnightmare/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/printnightmare/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -211,4 +211,4 @@
             then=TRUE,
             else= NOT Authenticode.Trusted = 'trusted')
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/printnightmaremonitor/index.html b/exchange/artifacts/pages/printnightmaremonitor/index.html
index ff3184458ab..cd1e14d6919 100644
--- a/exchange/artifacts/pages/printnightmaremonitor/index.html
+++ b/exchange/artifacts/pages/printnightmaremonitor/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Monitoring.PrintNightmare :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/printnightmaremonitor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/printnightmaremonitor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -128,4 +128,4 @@
         authenticode(filename=DriverInformation.DataFile) as DataFileAuthenticode
       FROM hits
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/printspoolerremediation/index.html b/exchange/artifacts/pages/printspoolerremediation/index.html
index f57a1fa087b..bbb05afed31 100644
--- a/exchange/artifacts/pages/printspoolerremediation/index.html
+++ b/exchange/artifacts/pages/printspoolerremediation/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Remediation.PrintSpooler :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/printspoolerremediation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/printspoolerremediation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -137,4 +137,4 @@
             FROM glob(globs=Target, accessor="reg")
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/processremediation/index.html b/exchange/artifacts/pages/processremediation/index.html
index 54d91c853f1..9c36479a238 100644
--- a/exchange/artifacts/pages/processremediation/index.html
+++ b/exchange/artifacts/pages/processremediation/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Remediation.Process :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/processremediation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/processremediation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -134,4 +134,4 @@
             then= kill_targets,
             else= { SELECT *, FALSE as Killed FROM targets } )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/proxyhunter/index.html b/exchange/artifacts/pages/proxyhunter/index.html
index 8d9ee443692..e60156840e1 100644
--- a/exchange/artifacts/pages/proxyhunter/index.html
+++ b/exchange/artifacts/pages/proxyhunter/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.ProxyHunter :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/proxyhunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/proxyhunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -104,4 +104,4 @@
       -- next we check for Windows inbuilt proxy config usually empty
       SELECT * FROM Artifact.Windows.Registry.PortProxy()
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/pslist.vtlookup/index.html b/exchange/artifacts/pages/pslist.vtlookup/index.html
index 56156700827..5066080107c 100644
--- a/exchange/artifacts/pages/pslist.vtlookup/index.html
+++ b/exchange/artifacts/pages/pslist.vtlookup/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>PSList.VTLookup :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/pslist.vtlookup/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/pslist.vtlookup/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -97,4 +97,4 @@
         SELECT *, {SELECT VTRating FROM Artifact.Server.Enrichment.Virustotal(VirustotalKey=VTKey,Hash=SHA1)} AS VTResults
         FROM foreach(row=Results)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/publicip/index.html b/exchange/artifacts/pages/publicip/index.html
index a86d0a8640e..03261d8a644 100644
--- a/exchange/artifacts/pages/publicip/index.html
+++ b/exchange/artifacts/pages/publicip/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.PublicIP :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/publicip/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/publicip/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -139,4 +139,4 @@
                 --AND SourceIP =~ '^127\\.|localhost'
                 --AND NOT SourceIP =~ '^127\\.|localhost'
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/qakbot/index.html b/exchange/artifacts/pages/qakbot/index.html
index e8ee59559bf..7145b2dcf48 100644
--- a/exchange/artifacts/pages/qakbot/index.html
+++ b/exchange/artifacts/pages/qakbot/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Carving.Qakbot :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/qakbot/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/qakbot/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -432,4 +432,4 @@
                 find_c2(methods=[_C2method1,_C2method2])[0].C2 as C2
             FROM results
         }, exclude=["_C2method1","_C2method2","_C2Raw","Resources"])
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/recordidcheck/index.html b/exchange/artifacts/pages/recordidcheck/index.html
index f22356ab0e9..e4eda68fe7c 100644
--- a/exchange/artifacts/pages/recordidcheck/index.html
+++ b/exchange/artifacts/pages/recordidcheck/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.RecordIDCheck :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/recordidcheck/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/recordidcheck/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -200,4 +200,4 @@
                 else= False)
             OR NOT _RecordIDSequence=1 )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/registryremediation/index.html b/exchange/artifacts/pages/registryremediation/index.html
index b279c25bf7a..209d2c7ff69 100644
--- a/exchange/artifacts/pages/registryremediation/index.html
+++ b/exchange/artifacts/pages/registryremediation/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Remediation.Registry :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/registryremediation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/registryremediation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -116,4 +116,4 @@
   - name: Modified
     type: timestamp
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/remoteiconforcedauth/index.html b/exchange/artifacts/pages/remoteiconforcedauth/index.html
index 721f44ce5eb..71301b7a9f1 100644
--- a/exchange/artifacts/pages/remoteiconforcedauth/index.html
+++ b/exchange/artifacts/pages/remoteiconforcedauth/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.RemoteIconForcedAuth :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/remoteiconforcedauth/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/remoteiconforcedauth/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -168,4 +168,4 @@
       SELECT * FROM final
 
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.alerts.iris.case.create/index.html b/exchange/artifacts/pages/server.alerts.iris.case.create/index.html
index bc9fc3d5b42..a96d3081eb1 100644
--- a/exchange/artifacts/pages/server.alerts.iris.case.create/index.html
+++ b/exchange/artifacts/pages/server.alerts.iris.case.create/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Alerts.IRIS.Case.Create :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.alerts.iris.case.create/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.alerts.iris.case.create/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -146,4 +146,4 @@
             url=format(format="%v/case/assets/add", args=[URL]))
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.alerts.mattermost/index.html b/exchange/artifacts/pages/server.alerts.mattermost/index.html
index 601692ba1c1..5afe83356bc 100644
--- a/exchange/artifacts/pages/server.alerts.mattermost/index.html
+++ b/exchange/artifacts/pages/server.alerts.mattermost/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Alerts.Mattermost :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.alerts.mattermost/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.alerts.mattermost/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -262,4 +262,4 @@
                                         )
 
       SELECT * FROM foreach(row=Results, query=Notify)
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.alerts.monitor.iris/index.html b/exchange/artifacts/pages/server.alerts.monitor.iris/index.html
index d47e262b8eb..d63270051b4 100644
--- a/exchange/artifacts/pages/server.alerts.monitor.iris/index.html
+++ b/exchange/artifacts/pages/server.alerts.monitor.iris/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Alerts.Monitor.IRIS :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.alerts.monitor.iris/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.alerts.monitor.iris/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -137,4 +137,4 @@
                 method="POST",
                 url=format(format="%v/alerts/add", args=[URL]))})
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.enrichment.echotrail/index.html b/exchange/artifacts/pages/server.enrichment.echotrail/index.html
index df645d364db..78300226c16 100644
--- a/exchange/artifacts/pages/server.enrichment.echotrail/index.html
+++ b/exchange/artifacts/pages/server.enrichment.echotrail/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Enrichment.EchoTrail :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.enrichment.echotrail/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.enrichment.echotrail/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -182,4 +182,4 @@
             EchoTrailLookup AS EchoTrailLookup
         FROM Data
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.enrichment.iris.ioclookup/index.html b/exchange/artifacts/pages/server.enrichment.iris.ioclookup/index.html
index 72df04445e2..8b8ef1fd395 100644
--- a/exchange/artifacts/pages/server.enrichment.iris.ioclookup/index.html
+++ b/exchange/artifacts/pages/server.enrichment.iris.ioclookup/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Enrichment.IRIS.IOCLookup :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.enrichment.iris.ioclookup/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.enrichment.iris.ioclookup/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -128,4 +128,4 @@
        SELECT * FROM EachIOC WHERE IOCValue =~ IOC
 
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.enrichment.malwarebazaar/index.html b/exchange/artifacts/pages/server.enrichment.malwarebazaar/index.html
index c760c99767d..ee33cc7d832 100644
--- a/exchange/artifacts/pages/server.enrichment.malwarebazaar/index.html
+++ b/exchange/artifacts/pages/server.enrichment.malwarebazaar/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Enrichment.MalwareBazaar :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.enrichment.malwarebazaar/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.enrichment.malwarebazaar/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -143,4 +143,4 @@
          data=Data(Name="query", Value=if(condition=QueryName.Query[0], then=QueryName.Query[0], else="get_info")) + Data(Name=if(condition=SearchName.SearchValue[0], then=SearchName.SearchValue[0], else="hash"), Value=Hash) + END)
        SELECT * FROM MBSubmission
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.enrichment.openai/index.html b/exchange/artifacts/pages/server.enrichment.openai/index.html
index 0849f158f0c..e8e90fda9a7 100644
--- a/exchange/artifacts/pages/server.enrichment.openai/index.html
+++ b/exchange/artifacts/pages/server.enrichment.openai/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Enrichment.OpenAI :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.enrichment.openai/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.enrichment.openai/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -150,4 +150,4 @@
             data=serialize(item=dict(`model`=Model, messages=[dict(`role`=Role, `content`=Prompt), ]))
         )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.enrichment.strelka.filescan/index.html b/exchange/artifacts/pages/server.enrichment.strelka.filescan/index.html
index fcb66b3e845..d69c0a35716 100644
--- a/exchange/artifacts/pages/server.enrichment.strelka.filescan/index.html
+++ b/exchange/artifacts/pages/server.enrichment.strelka.filescan/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Enrichment.Strelka.FileScan :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.enrichment.strelka.filescan/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.enrichment.strelka.filescan/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -141,4 +141,4 @@
             Content.scan as ScanResults 
         FROM ScanResults
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.enrichment.sublime.emailanalysis/index.html b/exchange/artifacts/pages/server.enrichment.sublime.emailanalysis/index.html
index 5d4548eb06f..3ebcf8375ee 100644
--- a/exchange/artifacts/pages/server.enrichment.sublime.emailanalysis/index.html
+++ b/exchange/artifacts/pages/server.enrichment.sublime.emailanalysis/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Enrichment.Sublime.EmailAnalysis :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.enrichment.sublime.emailanalysis/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.enrichment.sublime.emailanalysis/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -132,4 +132,4 @@
                    then=ResultsQuery, 
                    else=Response.Content))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.enrichment.threatfox/index.html b/exchange/artifacts/pages/server.enrichment.threatfox/index.html
index d21d7c4233d..d76fb3588af 100644
--- a/exchange/artifacts/pages/server.enrichment.threatfox/index.html
+++ b/exchange/artifacts/pages/server.enrichment.threatfox/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Enrichment.ThreatFox :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.enrichment.threatfox/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.enrichment.threatfox/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -132,4 +132,4 @@
               parse_json(data=Content).data[0] As _Content 
        FROM if(condition= IOCType=~"Hash",then=TFHash,else=TFIOC)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.enrichment.virustotal.filescan/index.html b/exchange/artifacts/pages/server.enrichment.virustotal.filescan/index.html
index a7685df877a..85ea7f67a8d 100644
--- a/exchange/artifacts/pages/server.enrichment.virustotal.filescan/index.html
+++ b/exchange/artifacts/pages/server.enrichment.virustotal.filescan/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Enrichment.Virustotal.FileScan :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.enrichment.virustotal.filescan/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.enrichment.virustotal.filescan/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -148,4 +148,4 @@
             Content AS _Data 
         FROM Analysis
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.import.artifactexchange/index.html b/exchange/artifacts/pages/server.import.artifactexchange/index.html
index d68e2e3b984..b7fe9e70fd4 100644
--- a/exchange/artifacts/pages/server.import.artifactexchange/index.html
+++ b/exchange/artifacts/pages/server.import.artifactexchange/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Import.ArtifactExchange :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.import.artifactexchange/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.import.artifactexchange/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -144,4 +144,4 @@
         then= add_definitions,
         else= show_definitions)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.import.watchlocaldirectory/index.html b/exchange/artifacts/pages/server.import.watchlocaldirectory/index.html
new file mode 100644
index 00000000000..ec0542b7951
--- /dev/null
+++ b/exchange/artifacts/pages/server.import.watchlocaldirectory/index.html
@@ -0,0 +1,101 @@
+<!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Import.WatchLocalDirectory :: Velociraptor - Digging deeper!</title>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.import.watchlocaldirectory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/overview/>Velociraptor Overview</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/history/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/overview/history/>History</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/overview/support/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/overview/support/>Support Policy</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/deployment/>Deployment</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/deployment/self-signed/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/self-signed/>Self-Signed SSL</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/cloud/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/deployment/cloud/>Cloud Deployment</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/deployment/cloud/multifrontend/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/cloud/multifrontend/>Multi-Frontend</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/clients/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/clients/>Deploying Clients</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/rbac/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/rbac/>Users and Roles</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/resources/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/resources/>Performance</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/troubleshooting/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/troubleshooting/>Troubleshooting</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/references/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/references/>Config Reference</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/gui/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/gui/>The Admin GUI</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/gui/clients/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/gui/clients/>Inspecting clients</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/gui/vfs/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/gui/vfs/>The VFS</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/gui/artifacts/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/gui/artifacts/>Artifacts</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/gui/hunting/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/gui/hunting/>Hunting</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/vql/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/vql/>VQL Fundamentals</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/vql/notebooks/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/vql/notebooks/>Notebooks</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/vql/artifacts/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/vql/artifacts/>Artifacts</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/vql/events/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/vql/events/>Event Queries</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/forensic/>Forensic Analysis</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/forensic/filesystem/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/filesystem/>Searching Filenames</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/searching/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/searching/>Searching Content</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/ntfs/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/ntfs/>NTFS Analysis</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/binary/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/binary/>Binary parsing</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/evidence_of_execution/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/evidence_of_execution/>Evidence Of Execution</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/event_logs/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/event_logs/>Event Logs</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/volatile/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/volatile/>Volatile State</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/offline_triage/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/offline_triage/>Triage and acquisition</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/offline_triage/remote_uploads/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/offline_triage/remote_uploads/>Remote Uploads</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/client_monitoring/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/client_monitoring/>Client Monitoring</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/extending_vql/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/extending_vql/>Extending VQL</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/server_automation/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/server_automation/>Server Automation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/server_automation/server_api/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/server_automation/server_api/>Server API</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/server_automation/server_monitoring/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/server_automation/server_monitoring/>Server Monitoring</a></div></li></ul></li></ul></li><hr><li data-nav-id=https://docs.velociraptor.app/vql_reference/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/vql_reference/><i class="fas fa-book"></i>VQL Reference</a></div><ul><li data-nav-id=https://docs.velociraptor.app/vql_reference/basic/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/basic/>Basic VQL</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/linux/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/linux/>Linux Specific</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/windows/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/windows/>Windows Specific</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/parsers/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/parsers/>Parsers</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/server/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/server/>Server Side</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/plugin/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/plugin/>Client Side</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/event/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/event/>Event Plugins</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/experimental/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/experimental/>Experimental</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/misc/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/misc/>Misc</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/training/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/training/><i class="fas fa-graduation-cap"></i>Training</a></div></li><li data-nav-id=https://docs.velociraptor.app/blog/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/blog/><i class="fas fa-newspaper"></i>Blog</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/presentations/><i class="fas fa-chalkboard-teacher"></i>Presentations</a></div><ul><li data-nav-id=https://docs.velociraptor.app/presentations/2022_linuxconf_au/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_linuxconf_au/>Linux Conf Au 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2022_auscert/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_auscert/>Auscert 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2022_dfrws_us/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_dfrws_us/>DFRWS US 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2022_tech_user_group_cbr/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_tech_user_group_cbr/>Tech Users Group 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2022_sans_summit/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_sans_summit/>SANS Summit 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2022_velocon/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_velocon/>Velocon 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2022_dfrws_apac/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_dfrws_apac/>DFRWS APAC 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2023_everything_open/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2023_everything_open/>EverythingOpen 2023</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2023_auscert/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2023_auscert/>Auscert 2023</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2023_velocon/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2023_velocon/>VeloCON 2023</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/exchange/ class="dd-item parent haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/exchange/><i class="fas fa-code"></i>Artifact Exchange</a></div></li><li data-nav-id=https://docs.velociraptor.app/artifact_references/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/artifact_references/><i class="fas fa-book"></i>Artifact Reference</a></div></li><li data-nav-id=https://docs.velociraptor.app/knowledge_base/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/knowledge_base/><i class="fas fa-brain"></i>Knowledge Base</a></div></li><li data-nav-id=https://docs.velociraptor.app/search/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
+<img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=top-github-link><a class=github-link title='Edit this page' href=https://github.com/Velocidex/velociraptor-docs/edit/master/content/exchange/artifacts/Server.Import.WatchLocalDirectory.yaml target=blank><i class="fas fa-code-branch"></i>
+<span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
+</a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
+<span class=links>Server.Import.WatchLocalDirectory</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Server.Import.WatchLocalDirectory</h1><p>This is an artifact that will monitor a local path for collections,
+which it will then ingest.</p><pre><code class=language-yaml>
+name: Server.Import.WatchLocalDirectory
+description: |
+   This is an artifact that will monitor a local path for collections, 
+   which it will then ingest. 
+
+type: SERVER_EVENT
+
+parameters:
+   - name: WatchDir
+     default: "/tmp/watch/*.zip"
+
+sources:
+  - query: |
+        SELECT * FROM foreach(
+            row={
+                SELECT * FROM diff(
+                    query={
+                        SELECT OSPath FROM glob(globs=WatchDir)
+                    }, period=3, key="OSPath"
+                )
+                WHERE Diff =~ "added"
+            }, query={
+                SELECT *, import_collection(filename=OSPath), OSPath 
+                FROM scope()
+            }
+        )
+
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.import.watchs3directory/index.html b/exchange/artifacts/pages/server.import.watchs3directory/index.html
new file mode 100644
index 00000000000..a10167b92c1
--- /dev/null
+++ b/exchange/artifacts/pages/server.import.watchs3directory/index.html
@@ -0,0 +1,123 @@
+<!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Import.WatchS3Directory :: Velociraptor - Digging deeper!</title>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.import.watchs3directory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/overview/>Velociraptor Overview</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/history/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/overview/history/>History</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/overview/support/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/overview/support/>Support Policy</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/deployment/>Deployment</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/deployment/self-signed/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/self-signed/>Self-Signed SSL</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/cloud/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/deployment/cloud/>Cloud Deployment</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/deployment/cloud/multifrontend/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/cloud/multifrontend/>Multi-Frontend</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/clients/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/clients/>Deploying Clients</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/rbac/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/rbac/>Users and Roles</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/resources/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/resources/>Performance</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/troubleshooting/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/troubleshooting/>Troubleshooting</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/references/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/references/>Config Reference</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/gui/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/gui/>The Admin GUI</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/gui/clients/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/gui/clients/>Inspecting clients</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/gui/vfs/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/gui/vfs/>The VFS</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/gui/artifacts/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/gui/artifacts/>Artifacts</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/gui/hunting/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/gui/hunting/>Hunting</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/vql/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/vql/>VQL Fundamentals</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/vql/notebooks/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/vql/notebooks/>Notebooks</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/vql/artifacts/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/vql/artifacts/>Artifacts</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/vql/events/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/vql/events/>Event Queries</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/forensic/>Forensic Analysis</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/forensic/filesystem/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/filesystem/>Searching Filenames</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/searching/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/searching/>Searching Content</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/ntfs/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/ntfs/>NTFS Analysis</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/binary/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/binary/>Binary parsing</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/evidence_of_execution/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/evidence_of_execution/>Evidence Of Execution</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/event_logs/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/event_logs/>Event Logs</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/volatile/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/volatile/>Volatile State</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/offline_triage/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/offline_triage/>Triage and acquisition</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/offline_triage/remote_uploads/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/offline_triage/remote_uploads/>Remote Uploads</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/client_monitoring/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/client_monitoring/>Client Monitoring</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/extending_vql/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/extending_vql/>Extending VQL</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/server_automation/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/server_automation/>Server Automation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/server_automation/server_api/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/server_automation/server_api/>Server API</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/server_automation/server_monitoring/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/server_automation/server_monitoring/>Server Monitoring</a></div></li></ul></li></ul></li><hr><li data-nav-id=https://docs.velociraptor.app/vql_reference/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/vql_reference/><i class="fas fa-book"></i>VQL Reference</a></div><ul><li data-nav-id=https://docs.velociraptor.app/vql_reference/basic/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/basic/>Basic VQL</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/linux/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/linux/>Linux Specific</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/windows/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/windows/>Windows Specific</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/parsers/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/parsers/>Parsers</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/server/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/server/>Server Side</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/plugin/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/plugin/>Client Side</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/event/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/event/>Event Plugins</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/experimental/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/experimental/>Experimental</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/misc/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/misc/>Misc</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/training/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/training/><i class="fas fa-graduation-cap"></i>Training</a></div></li><li data-nav-id=https://docs.velociraptor.app/blog/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/blog/><i class="fas fa-newspaper"></i>Blog</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/presentations/><i class="fas fa-chalkboard-teacher"></i>Presentations</a></div><ul><li data-nav-id=https://docs.velociraptor.app/presentations/2022_linuxconf_au/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_linuxconf_au/>Linux Conf Au 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2022_auscert/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_auscert/>Auscert 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2022_dfrws_us/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_dfrws_us/>DFRWS US 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2022_tech_user_group_cbr/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_tech_user_group_cbr/>Tech Users Group 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2022_sans_summit/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_sans_summit/>SANS Summit 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2022_velocon/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_velocon/>Velocon 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2022_dfrws_apac/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_dfrws_apac/>DFRWS APAC 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2023_everything_open/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2023_everything_open/>EverythingOpen 2023</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2023_auscert/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2023_auscert/>Auscert 2023</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2023_velocon/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2023_velocon/>VeloCON 2023</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/exchange/ class="dd-item parent haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/exchange/><i class="fas fa-code"></i>Artifact Exchange</a></div></li><li data-nav-id=https://docs.velociraptor.app/artifact_references/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/artifact_references/><i class="fas fa-book"></i>Artifact Reference</a></div></li><li data-nav-id=https://docs.velociraptor.app/knowledge_base/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/knowledge_base/><i class="fas fa-brain"></i>Knowledge Base</a></div></li><li data-nav-id=https://docs.velociraptor.app/search/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
+<img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=top-github-link><a class=github-link title='Edit this page' href=https://github.com/Velocidex/velociraptor-docs/edit/master/content/exchange/artifacts/Server.Import.WatchS3Directory.yaml target=blank><i class="fas fa-code-branch"></i>
+<span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
+</a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
+<span class=links>Server.Import.WatchS3Directory</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Server.Import.WatchS3Directory</h1><p>This is an artifact that will monitor an S3 path for collections,
+which it will then ingest.</p><pre><code class=language-yaml>
+name: Server.Import.WatchS3Directory
+description: |
+   This is an artifact that will monitor an S3 path for collections, 
+   which it will then ingest. 
+
+# Can be CLIENT, CLIENT_EVENT, SERVER, SERVER_EVENT
+type: SERVER_EVENT
+
+parameters:
+   - name: WatchDir
+     default: "/velociraptor/*.zip"
+
+   - name: Endpoint
+     default: 'http://127.0.0.1:9000/'
+     
+   - name: Key
+     default: 'admin'
+     
+   - name: Secret
+     default: 'password'
+     
+   - name: Region
+     default: 'us-east-1'
+
+sources:
+  - query: |
+        LET S3_CREDENTIALS &lt;= dict(
+            endpoint=Endpoint, 
+            credentials_key=Key, 
+            credentials_secret=Secret,
+            region=Region,
+            no_verify_cert=1)
+        SELECT * FROM foreach(
+            row={
+                SELECT * FROM diff(
+                    query={
+                        SELECT OSPath FROM glob(globs=WatchDir, accessor="s3")
+                    }, period=3, key="OSPath"
+                )
+                WHERE Diff =~ "added"
+            }, query={
+                SELECT *, import_collection(
+                    filename=OSPath,
+                    accessor="s3"
+                ),  OSPath 
+                FROM scope()
+            }
+        )
+
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.monitor.autolabeling.clients/index.html b/exchange/artifacts/pages/server.monitor.autolabeling.clients/index.html
index 972f91d769b..87927495466 100644
--- a/exchange/artifacts/pages/server.monitor.autolabeling.clients/index.html
+++ b/exchange/artifacts/pages/server.monitor.autolabeling.clients/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Monitor.Autolabeling.Clients :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.monitor.autolabeling.clients/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.monitor.autolabeling.clients/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -104,4 +104,4 @@
     SELECT * FROM foreach(row=interrogations, query=matches)
     
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.notification.mastodon/index.html b/exchange/artifacts/pages/server.notification.mastodon/index.html
index b978831713f..22e0ae5ada9 100644
--- a/exchange/artifacts/pages/server.notification.mastodon/index.html
+++ b/exchange/artifacts/pages/server.notification.mastodon/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Notification.Mastodon :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.notification.mastodon/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.notification.mastodon/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -120,4 +120,4 @@
             data=dict(`status`=Status)
         )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.notification.mattermost/index.html b/exchange/artifacts/pages/server.notification.mattermost/index.html
index d8a9429b5a0..e17650f887c 100644
--- a/exchange/artifacts/pages/server.notification.mattermost/index.html
+++ b/exchange/artifacts/pages/server.notification.mattermost/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Notification.Mattermost :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.notification.mattermost/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.notification.mattermost/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -122,4 +122,4 @@
               method="POST",
               url=url)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.slack.clients.enrolled/index.html b/exchange/artifacts/pages/server.slack.clients.enrolled/index.html
index 7df47f5bee4..c661bf88033 100644
--- a/exchange/artifacts/pages/server.slack.clients.enrolled/index.html
+++ b/exchange/artifacts/pages/server.slack.clients.enrolled/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Slack.Clients.Enrolled :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.slack.clients.enrolled/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.slack.clients.enrolled/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -127,4 +127,4 @@
           })
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.telegram.clients.enrolled/index.html b/exchange/artifacts/pages/server.telegram.clients.enrolled/index.html
index 5ea1a658f34..f11bf25ca88 100644
--- a/exchange/artifacts/pages/server.telegram.clients.enrolled/index.html
+++ b/exchange/artifacts/pages/server.telegram.clients.enrolled/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Telegram.Clients.Enrolled :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.telegram.clients.enrolled/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.telegram.clients.enrolled/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -154,4 +154,4 @@
           )},
         query=send_massage)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.utils.backupazure/index.html b/exchange/artifacts/pages/server.utils.backupazure/index.html
index 84581effec5..d7f79f2aef3 100644
--- a/exchange/artifacts/pages/server.utils.backupazure/index.html
+++ b/exchange/artifacts/pages/server.utils.backupazure/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.BackupAzure :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.utils.backupazure/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.utils.backupazure/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -127,4 +127,4 @@
         if(condition=RemoveDownloads,
            then=rm(filename=file_store(path=FlowDownload)))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.utils.orphanedflows/index.html b/exchange/artifacts/pages/server.utils.orphanedflows/index.html
index 3058cbe1e39..0f7556c097f 100644
--- a/exchange/artifacts/pages/server.utils.orphanedflows/index.html
+++ b/exchange/artifacts/pages/server.utils.orphanedflows/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.OrphanedFlows :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.utils.orphanedflows/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.utils.orphanedflows/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -113,4 +113,4 @@
      SELECT Path, ClientId, FlowID, Size, humanize(bytes=Size) AS HumanSize
      FROM OrphanedFlows
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.utils.querysummary/index.html b/exchange/artifacts/pages/server.utils.querysummary/index.html
index 1dc673cbfe8..4f6d66cf2ed 100644
--- a/exchange/artifacts/pages/server.utils.querysummary/index.html
+++ b/exchange/artifacts/pages/server.utils.querysummary/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.QuerySummary :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.utils.querysummary/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.utils.querysummary/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -98,4 +98,4 @@
                                              len(list=_value) as TotalCount 
                                              FROM items(item=summary) ORDER BY TotalCount DESC
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/server.utils.scheduleddeletion/index.html b/exchange/artifacts/pages/server.utils.scheduleddeletion/index.html
index beacf845887..1a9c547927d 100644
--- a/exchange/artifacts/pages/server.utils.scheduleddeletion/index.html
+++ b/exchange/artifacts/pages/server.utils.scheduleddeletion/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server.Utils.ScheduledDeletion :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.utils.scheduleddeletion/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/server.utils.scheduleddeletion/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -101,4 +101,4 @@
           SELECT * FROM Artifact.Server.Utils.DeleteMonitoringData(ArtifactRegex=ArtifactRegex, DateBefore=DateToDelete, ReallyDoIt=true)
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/smoothoperator/index.html b/exchange/artifacts/pages/smoothoperator/index.html
index 4cbdf4d81ee..d791e5e745f 100644
--- a/exchange/artifacts/pages/smoothoperator/index.html
+++ b/exchange/artifacts/pages/smoothoperator/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.SmoothOperator :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/smoothoperator/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/smoothoperator/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -421,4 +421,4 @@
   - name: HitContext
     type: preview_upload
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/splunk.events.clients/index.html b/exchange/artifacts/pages/splunk.events.clients/index.html
index 56541b37ffe..8fa9e809205 100644
--- a/exchange/artifacts/pages/splunk.events.clients/index.html
+++ b/exchange/artifacts/pages/splunk.events.clients/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Splunk.Events.Clients :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/splunk.events.clients/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/splunk.events.clients/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -136,4 +136,4 @@
           wait_time=5,
           token=splunkToken)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/squirrelwaffle/index.html b/exchange/artifacts/pages/squirrelwaffle/index.html
index 5b1fa25d921..8ed385f5b3e 100644
--- a/exchange/artifacts/pages/squirrelwaffle/index.html
+++ b/exchange/artifacts/pages/squirrelwaffle/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Carving.SquirrelWaffle :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/squirrelwaffle/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/squirrelwaffle/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -283,4 +283,4 @@
                 FROM finalPairs
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/suspiciouswmiconsumers/index.html b/exchange/artifacts/pages/suspiciouswmiconsumers/index.html
index 0e784b903a2..02e7378ae93 100644
--- a/exchange/artifacts/pages/suspiciouswmiconsumers/index.html
+++ b/exchange/artifacts/pages/suspiciouswmiconsumers/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Analysis.SuspiciousWMIConsumers :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/suspiciouswmiconsumers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/suspiciouswmiconsumers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -215,4 +215,4 @@
         }
       ) GROUP BY ConsumerDetails, FilterDetails
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526433></script><script src=/js/perfect-scrollbar.min.js?1699526433></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526433></script><script src=/js/jquery.sticky.js?1699526433></script><script src=/js/featherlight.min.js?1699526433></script><script src=/js/highlight.min.js?1699526433></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526433></script><script src=/js/learn.js?1699526433></script><script src=/js/hugo-learn.js?1699526433></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/sysaid/index.html b/exchange/artifacts/pages/sysaid/index.html
index 3126efac7be..157bc95084d 100644
--- a/exchange/artifacts/pages/sysaid/index.html
+++ b/exchange/artifacts/pages/sysaid/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.SysAid :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/sysaid/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/sysaid/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -230,4 +230,4 @@
   - name: HitContext
     type: preview_upload
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/sysmonarchive/index.html b/exchange/artifacts/pages/sysmonarchive/index.html
index d81933f585f..19c93bfeec3 100644
--- a/exchange/artifacts/pages/sysmonarchive/index.html
+++ b/exchange/artifacts/pages/sysmonarchive/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Sysinternals.SysmonArchive :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526433 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526433 rel=stylesheet><link href=/css/featherlight.min.css?1699526433 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526433 rel=stylesheet><link href=/css/auto-complete.css?1699526433 rel=stylesheet><link href=/css/theme.css?1699526433 rel=stylesheet><link href=/css/tabs.css?1699526433 rel=stylesheet><link href=/css/hugo-theme.css?1699526433 rel=stylesheet><link href=/css/theme-mine.css?1699526433 rel=stylesheet><link href=/css/dark.css?1699526433 rel=stylesheet><link href=/css/syntax.css?1699526433 rel=stylesheet><link href=/css/light.css?1699526433 rel=stylesheet><link href=/css/hljs.css?1699526433 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526433 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526433></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/sysmonarchive/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/sysmonarchive/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -123,4 +123,4 @@
                 then= TRUE,
                 else= TotalSize &gt; ArchiveSize) 
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/sysmonarchivemonitor/index.html b/exchange/artifacts/pages/sysmonarchivemonitor/index.html
index e6dd2435247..d8f0c894d58 100644
--- a/exchange/artifacts/pages/sysmonarchivemonitor/index.html
+++ b/exchange/artifacts/pages/sysmonarchivemonitor/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Events.SysmonArchiveMonitor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/sysmonarchivemonitor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/sysmonarchivemonitor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -121,4 +121,4 @@
                                         ShowAll=False)
                 })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/sysmonregistry/index.html b/exchange/artifacts/pages/sysmonregistry/index.html
index 2a966043b6c..e214833b4f3 100644
--- a/exchange/artifacts/pages/sysmonregistry/index.html
+++ b/exchange/artifacts/pages/sysmonregistry/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Events.SysmonRegistry :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/sysmonregistry/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/sysmonregistry/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -233,4 +233,4 @@
                         else= False)
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/sysmontriage/index.html b/exchange/artifacts/pages/sysmontriage/index.html
index 3ac5b863b8d..1e72c4c3c0d 100644
--- a/exchange/artifacts/pages/sysmontriage/index.html
+++ b/exchange/artifacts/pages/sysmontriage/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Triage.Sysmon :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/sysmontriage/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/sysmontriage/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -517,4 +517,4 @@
                 --,EventData
             FROM source(artifact="Exchange.Windows.Triage.Sysmon")
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/systembc/index.html b/exchange/artifacts/pages/systembc/index.html
index 5c367f33c5f..246c3d3da72 100644
--- a/exchange/artifacts/pages/systembc/index.html
+++ b/exchange/artifacts/pages/systembc/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Carving.SystemBC :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/systembc/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/systembc/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -229,4 +229,4 @@
                 else= ProcessConfiguration))
       WHERE SystemBC.HOST1 OR SystemBC.HOST2 OR SystemBC.TOR
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/teamviewerlanguage/index.html b/exchange/artifacts/pages/teamviewerlanguage/index.html
index 7294c7269e2..96dd0facd17 100644
--- a/exchange/artifacts/pages/teamviewerlanguage/index.html
+++ b/exchange/artifacts/pages/teamviewerlanguage/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.TeamViewerLanguage :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/teamviewerlanguage/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/teamviewerlanguage/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -200,4 +200,4 @@
       FROM details
       WHERE KeyboardLayout =~ LayoutRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/termsrv/index.html b/exchange/artifacts/pages/termsrv/index.html
index b8ff2e48414..a802e58a67f 100644
--- a/exchange/artifacts/pages/termsrv/index.html
+++ b/exchange/artifacts/pages/termsrv/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.Termsrv :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/termsrv/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/termsrv/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -168,4 +168,4 @@
   - name: HitContext
     type: preview_upload
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/timestomp/index.html b/exchange/artifacts/pages/timestomp/index.html
index 1c07e22c64b..cd1797360c8 100644
--- a/exchange/artifacts/pages/timestomp/index.html
+++ b/exchange/artifacts/pages/timestomp/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.NTFS.Timestomp :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/timestomp/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/timestomp/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -296,4 +296,4 @@
         then= upload_results,
         else= results)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/uefi/index.html b/exchange/artifacts/pages/uefi/index.html
index 3298552b914..94b5ba8328a 100644
--- a/exchange/artifacts/pages/uefi/index.html
+++ b/exchange/artifacts/pages/uefi/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.UEFI :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/uefi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/uefi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -138,4 +138,4 @@
         authenticode(accessor='fat',filename=OSPath) as Authenticode
       FROM find_files
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/unattendxml/index.html b/exchange/artifacts/pages/unattendxml/index.html
index e9a14af62de..d49b157d08f 100644
--- a/exchange/artifacts/pages/unattendxml/index.html
+++ b/exchange/artifacts/pages/unattendxml/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.UnattendXML :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/unattendxml/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/unattendxml/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -117,4 +117,4 @@
         then= upload_hits,
         else= hits )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/usbplugin/index.html b/exchange/artifacts/pages/usbplugin/index.html
index 50a0b20765e..acaa41a99d3 100644
--- a/exchange/artifacts/pages/usbplugin/index.html
+++ b/exchange/artifacts/pages/usbplugin/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Monitor.USBPlugIn :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/usbplugin/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/usbplugin/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -91,4 +91,4 @@
             namespace="ROOT/CIMV2",
             wait=50000000)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/usbyara/index.html b/exchange/artifacts/pages/usbyara/index.html
index e39dbc79112..fc96d9ebbed 100644
--- a/exchange/artifacts/pages/usbyara/index.html
+++ b/exchange/artifacts/pages/usbyara/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.USBYara :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/usbyara/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/usbyara/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -129,4 +129,4 @@
                 FROM Artifact.Generic.Detection.Yara.Glob(PathGlob=DriveName + TargetGlob,YaraRule=PayloadYara)
             })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/volatility_profile/index.html b/exchange/artifacts/pages/volatility_profile/index.html
index 1fc5d902d9d..2302c76f8c3 100644
--- a/exchange/artifacts/pages/volatility_profile/index.html
+++ b/exchange/artifacts/pages/volatility_profile/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux.Volatility.Create.Profile :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/volatility_profile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/volatility_profile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -106,4 +106,4 @@
                 b={SELECT * FROM execve(argv=['bash', '-c', 'mv /tmp/volatility-master /tmp/volatility-master.zip /tmp/' + Zipname + '.zip ' + dirtmp])})
           })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/vscodetasks/index.html b/exchange/artifacts/pages/vscodetasks/index.html
index bac74e1ca86..d9ed97295d3 100644
--- a/exchange/artifacts/pages/vscodetasks/index.html
+++ b/exchange/artifacts/pages/vscodetasks/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Persistence.VscodeTasks :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/vscodetasks/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/vscodetasks/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -128,4 +128,4 @@
                 then= FileName='settings.json',
                 else= Parsed.settings.`terminal.integrated.defaultprofile.windows` )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.analysis.capa/index.html b/exchange/artifacts/pages/windows.analysis.capa/index.html
index d4ed1d29a1b..b65117c23a5 100644
--- a/exchange/artifacts/pages/windows.analysis.capa/index.html
+++ b/exchange/artifacts/pages/windows.analysis.capa/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Analysis.Capa :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.analysis.capa/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.analysis.capa/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -127,4 +127,4 @@
                 get(member="_value.meta") AS _Meta
             FROM scope()})
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.applications.anydesk.logparser/index.html b/exchange/artifacts/pages/windows.applications.anydesk.logparser/index.html
index 2acf7e5ae86..74e8e874d21 100644
--- a/exchange/artifacts/pages/windows.applications.anydesk.logparser/index.html
+++ b/exchange/artifacts/pages/windows.applications.anydesk.logparser/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.AnyDesk.LogParser :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.applications.anydesk.logparser/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.applications.anydesk.logparser/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -111,4 +111,4 @@
         FROM parse_log 
         WHERE Record.Message
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.applications.anydesk/index.html b/exchange/artifacts/pages/windows.applications.anydesk/index.html
index 8d041dae408..5aa9a40326a 100644
--- a/exchange/artifacts/pages/windows.applications.anydesk/index.html
+++ b/exchange/artifacts/pages/windows.applications.anydesk/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.AnyDesk :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.applications.anydesk/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.applications.anydesk/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -183,4 +183,4 @@
             then=include_vss,
             else=exclude_vss)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.applications.defenderhistory/index.html b/exchange/artifacts/pages/windows.applications.defenderhistory/index.html
index b01a0307932..4f891a35536 100644
--- a/exchange/artifacts/pages/windows.applications.defenderhistory/index.html
+++ b/exchange/artifacts/pages/windows.applications.defenderhistory/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.DefenderHistory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.applications.defenderhistory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.applications.defenderhistory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -168,4 +168,4 @@
                     FullPath as ParsedFileFullPath
             FROM temp
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.applications.freefilesync/index.html b/exchange/artifacts/pages/windows.applications.freefilesync/index.html
index 2523321e32f..19a56825e56 100644
--- a/exchange/artifacts/pages/windows.applications.freefilesync/index.html
+++ b/exchange/artifacts/pages/windows.applications.freefilesync/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.FreeFileSync :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.applications.freefilesync/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.applications.freefilesync/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -199,4 +199,4 @@
   - name: Upload
     type: preview_upload
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.applications.goodsync/index.html b/exchange/artifacts/pages/windows.applications.goodsync/index.html
index 3995c4e44f2..24d694fcdff 100644
--- a/exchange/artifacts/pages/windows.applications.goodsync/index.html
+++ b/exchange/artifacts/pages/windows.applications.goodsync/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.GoodSync :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.applications.goodsync/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.applications.goodsync/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -163,4 +163,4 @@
         WHERE Record.Message =~ "CheckLicenseViaGsAccount:"  
         
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.applications.lecmd/index.html b/exchange/artifacts/pages/windows.applications.lecmd/index.html
index 9ded5d80e7d..b5f79f2b583 100644
--- a/exchange/artifacts/pages/windows.applications.lecmd/index.html
+++ b/exchange/artifacts/pages/windows.applications.lecmd/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Applications.LECmd :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.applications.lecmd/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.applications.lecmd/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -143,4 +143,4 @@
       AND LocalPath =~ localPath
       AND Arguments =~ arguments
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.attacksimulation.atomicredteam/index.html b/exchange/artifacts/pages/windows.attacksimulation.atomicredteam/index.html
index 707cea3287e..2d0ef3da741 100644
--- a/exchange/artifacts/pages/windows.attacksimulation.atomicredteam/index.html
+++ b/exchange/artifacts/pages/windows.attacksimulation.atomicredteam/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.AttackSimulation.AtomicRedTeam :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.attacksimulation.atomicredteam/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.attacksimulation.atomicredteam/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -3606,4 +3606,4 @@
 
      SELECT `Execution Time (UTC)`, `Execution Time (Local)`, '[' + Technique + '](https://github.com/redcanaryco/atomic-red-team/blob/master/atomics/' + Technique + '/' + Technique + '.md)' AS Technique, `Test Number`, `Test Name`, Hostname, Username, GUID FROM parse_csv(accessor="file", filename=ExecutionLogFile)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.detection.bruteratel/index.html b/exchange/artifacts/pages/windows.detection.bruteratel/index.html
index d112a959e19..bf86e4f5b04 100644
--- a/exchange/artifacts/pages/windows.detection.bruteratel/index.html
+++ b/exchange/artifacts/pages/windows.detection.bruteratel/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.BruteRatel :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.detection.bruteratel/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.detection.bruteratel/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -144,4 +144,4 @@
         then=upload_hits,
         else=hits)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.detection.isomount/index.html b/exchange/artifacts/pages/windows.detection.isomount/index.html
index d4e6e8b0839..113d0d0d719 100644
--- a/exchange/artifacts/pages/windows.detection.isomount/index.html
+++ b/exchange/artifacts/pages/windows.detection.isomount/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.ISOMount :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.detection.isomount/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.detection.isomount/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -131,4 +131,4 @@
           FROM source(artifact="Exchange.Windows.Detection.ISOMount")
           GROUP BY Computer,Username, EventID, Filename
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.detection.network.changed/index.html b/exchange/artifacts/pages/windows.detection.network.changed/index.html
index 3e687305d48..dcad23b6dad 100644
--- a/exchange/artifacts/pages/windows.detection.network.changed/index.html
+++ b/exchange/artifacts/pages/windows.detection.network.changed/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.Network.Changed :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.detection.network.changed/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.detection.network.changed/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -100,4 +100,4 @@
           SELECT Data.value as NetworkName from glob(accessor="reg",globs=Globs) WHERE Name=~"ProfileName" 
       })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.detection.pipehunter/index.html b/exchange/artifacts/pages/windows.detection.pipehunter/index.html
index ccc62068226..dd6ae5c87b2 100644
--- a/exchange/artifacts/pages/windows.detection.pipehunter/index.html
+++ b/exchange/artifacts/pages/windows.detection.pipehunter/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.PipeHunter :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.detection.pipehunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.detection.pipehunter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -172,4 +172,4 @@
         SELECT * FROM execve(argv=["Powershell", "-ExecutionPolicy",
             "unrestricted", "-c", ps+pipe_name+ps2])    
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.detection.proxylogon.proxyshell/index.html b/exchange/artifacts/pages/windows.detection.proxylogon.proxyshell/index.html
index b7c5dfc0c79..bccf12f471e 100644
--- a/exchange/artifacts/pages/windows.detection.proxylogon.proxyshell/index.html
+++ b/exchange/artifacts/pages/windows.detection.proxylogon.proxyshell/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.ProxyLogon.ProxyShell :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.detection.proxylogon.proxyshell/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.detection.proxylogon.proxyshell/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -121,4 +121,4 @@
               ((Cmdlet =~ "new-mailboxexportrequest" or Cmdlet =~ "new-exchangecertificate") and Payload =~ "aspx") or 
               (Message =~ "set-oabvirtualdirectory" and Message =~ "script") or (Cmdlet =~ "set-oabvirtualdirectory" and Payload =~ "script"))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.detection.scmanagerbackdoor/index.html b/exchange/artifacts/pages/windows.detection.scmanagerbackdoor/index.html
index 2402d20dc17..416c779d14d 100644
--- a/exchange/artifacts/pages/windows.detection.scmanagerbackdoor/index.html
+++ b/exchange/artifacts/pages/windows.detection.scmanagerbackdoor/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.ScmanagerBackdoor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.detection.scmanagerbackdoor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.detection.scmanagerbackdoor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -181,4 +181,4 @@
         SELECT * FROM execve(argv=["Powershell", "-ExecutionPolicy",
             "unrestricted", "-c", ps])   
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.detection.wonkavision/index.html b/exchange/artifacts/pages/windows.detection.wonkavision/index.html
index 5b14a93c517..b534e3d52af 100644
--- a/exchange/artifacts/pages/windows.detection.wonkavision/index.html
+++ b/exchange/artifacts/pages/windows.detection.wonkavision/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.WonkaVision :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.detection.wonkavision/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.detection.wonkavision/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -101,4 +101,4 @@
           c=AnalyzeIt
         )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.etw.detectprocessspoofing/index.html b/exchange/artifacts/pages/windows.etw.detectprocessspoofing/index.html
index 843bc9eddd1..ec27d2d75c1 100644
--- a/exchange/artifacts/pages/windows.etw.detectprocessspoofing/index.html
+++ b/exchange/artifacts/pages/windows.etw.detectprocessspoofing/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.ETW.DetectProcessSpoofing :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.etw.detectprocessspoofing/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.etw.detectprocessspoofing/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -142,4 +142,4 @@
         FROM watch_etw(guid="{22fb2cd6-0e7b-422b-a0c7-2fad1fd0e716}", any=0x10)
         WHERE System.ID = 1 AND str(str=System.ProcessID) != EventData.ParentProcessID
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.etw.dnsofflinecollector/index.html b/exchange/artifacts/pages/windows.etw.dnsofflinecollector/index.html
index 3a586a465e9..d83ecbdd300 100644
--- a/exchange/artifacts/pages/windows.etw.dnsofflinecollector/index.html
+++ b/exchange/artifacts/pages/windows.etw.dnsofflinecollector/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.ETW.DNSOfflineCollector :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.etw.dnsofflinecollector/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.etw.dnsofflinecollector/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -115,4 +115,4 @@
             AnswerRegex=arg_AnswerRegex,
             CommandLineExclusion=arg_CommandLineExclusion))) 
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.eventlogs.aurora/index.html b/exchange/artifacts/pages/windows.eventlogs.aurora/index.html
index ff40604675b..935a32e5ce2 100644
--- a/exchange/artifacts/pages/windows.eventlogs.aurora/index.html
+++ b/exchange/artifacts/pages/windows.eventlogs.aurora/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.Aurora :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.aurora/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.aurora/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -107,4 +107,4 @@
         SearchVSS=TargetVSS)
       WHERE Message =~ MessageRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.eventlogs.chainsaw/index.html b/exchange/artifacts/pages/windows.eventlogs.chainsaw/index.html
index 1956991bde3..8c91b5d0b0c 100644
--- a/exchange/artifacts/pages/windows.eventlogs.chainsaw/index.html
+++ b/exchange/artifacts/pages/windows.eventlogs.chainsaw/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.Chainsaw :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.chainsaw/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.chainsaw/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -145,4 +145,4 @@
                 get(member="authors") AS Authors
         FROM parse_json_array(data=read_file(filename=TmpResults, length=JSONLength))
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.eventlogs.evtxhussar/index.html b/exchange/artifacts/pages/windows.eventlogs.evtxhussar/index.html
index e5505eaec1d..e3e09771364 100644
--- a/exchange/artifacts/pages/windows.eventlogs.evtxhussar/index.html
+++ b/exchange/artifacts/pages/windows.eventlogs.evtxhussar/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.EvtxHussar :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.evtxhussar/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.evtxhussar/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -387,4 +387,4 @@
       SELECT *, "EvtxHussar.WindowsFirewall" AS __Source FROM PluginOutput(search_result=GetOutputFiles(category="firewall", jsonl_filename="windows_firewall.jsonl"))
       
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.eventlogs.hayabusa/index.html b/exchange/artifacts/pages/windows.eventlogs.hayabusa/index.html
index 594e42020f8..b4bc3f747fd 100644
--- a/exchange/artifacts/pages/windows.eventlogs.hayabusa/index.html
+++ b/exchange/artifacts/pages/windows.eventlogs.hayabusa/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.Hayabusa :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.hayabusa/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.hayabusa/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -188,4 +188,4 @@
         SELECT *, timestamp(string=Timestamp) AS EventTime
         FROM parse_csv(filename=CSVFile)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.eventlogs.logonsessions/index.html b/exchange/artifacts/pages/windows.eventlogs.logonsessions/index.html
index 698eae806ec..ec2b86058a4 100644
--- a/exchange/artifacts/pages/windows.eventlogs.logonsessions/index.html
+++ b/exchange/artifacts/pages/windows.eventlogs.logonsessions/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.LogonSessions :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.logonsessions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.logonsessions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -204,4 +204,4 @@
         then={ SELECT * FROM include_vss },
         else={ SELECT * FROM exclude_vss })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.eventlogs.rdpclientactivity/index.html b/exchange/artifacts/pages/windows.eventlogs.rdpclientactivity/index.html
index da7bf6d0a3e..77aa2e6df5b 100644
--- a/exchange/artifacts/pages/windows.eventlogs.rdpclientactivity/index.html
+++ b/exchange/artifacts/pages/windows.eventlogs.rdpclientactivity/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.RDPClientActivity :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.rdpclientactivity/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.rdpclientactivity/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -328,4 +328,4 @@
           then={ SELECT * FROM include_vss },
           else={ SELECT * FROM exclude_vss })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.eventlogs.remoteaccessvpn/index.html b/exchange/artifacts/pages/windows.eventlogs.remoteaccessvpn/index.html
index 644c53205b6..15ea87f3d0a 100644
--- a/exchange/artifacts/pages/windows.eventlogs.remoteaccessvpn/index.html
+++ b/exchange/artifacts/pages/windows.eventlogs.remoteaccessvpn/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.RemoteAccessVPN :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.remoteaccessvpn/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.remoteaccessvpn/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -187,4 +187,4 @@
                SELECT * from parse_csv(filename=FullPath, columns=["ComputerName","ServiceName","Record-Date","Record-Time","Packet-Type","User-Name","Fully-Qualified-Distinguished-Name","Called-Station-ID","Calling-Station-ID","Callback-Number","Framed-IP-Address","NAS-Identifier","NAS-IP-Address","NAS-Port","Client-Vendor","Client-IP-Address","Client-Friendly-Name","Event-Timestamp","Port-Limit","NAS-Port-Type","Connect-Info","Framed-Protocol","Service-Type","Authentication-Type","Policy-Name","Reason-Code","Class","Session-Timeout","Idle-Timeout","Termination-Action","EAP-Friendly-Name","Acct-Status-Type","Acct-Delay-Time","Acct-Input-Octets","Acct-Output-Octets","Acct-Session-Id","Acct-Authentic","Acct-Session-Time","Acct-Input-Packets","Acct-Output-Packets","Acct-Terminate-Cause","Acct-Multi-Ssn-ID","Acct-Link-Count","Acct-Interim-Interval","Tunnel-Type","Tunnel-Medium-Type","Tunnel-Client-Endpt","Tunnel-Server-Endpt","Acct-Tunnel-Conn","Tunnel-Pvt-Group-ID","Tunnel-Assignment-ID","Tunnel-Preference","MS-Acct-Auth-Type","MS-Acct-EAP-Type","MS-RAS-Version","MS-RAS-Vendor","MS-CHAP-Error","MS-CHAP-Domain","MS-MPPE-Encryption-Types","MS-MPPE-Encryption-Policy","Proxy-Policy-Name","Provider-Type","Provider-Name","Remote-Server-Address","MS-RAS-Client-Name","MS-RAS-Client-Version"])
            })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.eventlogs.rpcfirewall/index.html b/exchange/artifacts/pages/windows.eventlogs.rpcfirewall/index.html
index 6f1e99d80f1..c53f80a6d3e 100644
--- a/exchange/artifacts/pages/windows.eventlogs.rpcfirewall/index.html
+++ b/exchange/artifacts/pages/windows.eventlogs.rpcfirewall/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.RPCFirewall :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.rpcfirewall/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.rpcfirewall/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -132,4 +132,4 @@
             SearchVSS=TargetVSS,
             IdRegex=IdRegex)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.eventlogs.wonkavision/index.html b/exchange/artifacts/pages/windows.eventlogs.wonkavision/index.html
index ac5d79aded0..25a0c89be74 100644
--- a/exchange/artifacts/pages/windows.eventlogs.wonkavision/index.html
+++ b/exchange/artifacts/pages/windows.eventlogs.wonkavision/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.WonkaVision :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.wonkavision/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.wonkavision/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -123,4 +123,4 @@
             IdRegex=IdRegex)
         WHERE Provider =~ "Wonka"
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.eventlogs.zircolite/index.html b/exchange/artifacts/pages/windows.eventlogs.zircolite/index.html
index ae4fd4a9773..63e168379ff 100644
--- a/exchange/artifacts/pages/windows.eventlogs.zircolite/index.html
+++ b/exchange/artifacts/pages/windows.eventlogs.zircolite/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.EventLogs.Zircolite :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.zircolite/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.eventlogs.zircolite/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -123,4 +123,4 @@
             FROM Content    
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.events.eventlogmodifications/index.html b/exchange/artifacts/pages/windows.events.eventlogmodifications/index.html
index 31d2d9d4adb..a0c090db416 100644
--- a/exchange/artifacts/pages/windows.events.eventlogmodifications/index.html
+++ b/exchange/artifacts/pages/windows.events.eventlogmodifications/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Events.EventLogModifications :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.events.eventlogmodifications/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.events.eventlogmodifications/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -116,4 +116,4 @@
       WHERE Diff =~ "added"
            
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.events.trackprocesses.useexistingsysmononly/index.html b/exchange/artifacts/pages/windows.events.trackprocesses.useexistingsysmononly/index.html
index e9e82a30fbe..6d874843d8c 100644
--- a/exchange/artifacts/pages/windows.events.trackprocesses.useexistingsysmononly/index.html
+++ b/exchange/artifacts/pages/windows.events.trackprocesses.useexistingsysmononly/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Events.TrackProcesses.UseExistingSysmonOnly :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.events.trackprocesses.useexistingsysmononly/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.events.trackprocesses.useexistingsysmononly/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -191,4 +191,4 @@
       SELECT * FROM process_tracker_updates()
       WHERE update_type = "stats"
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.forensics.clipboard/index.html b/exchange/artifacts/pages/windows.forensics.clipboard/index.html
index 2508313f237..95d4089f612 100644
--- a/exchange/artifacts/pages/windows.forensics.clipboard/index.html
+++ b/exchange/artifacts/pages/windows.forensics.clipboard/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.Clipboard :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.forensics.clipboard/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.forensics.clipboard/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -121,4 +121,4 @@
              SELECT Mtime, OSPath from glob(globs=FileGlob)}, query={
                  SELECT *, Mtime, OSPath FROM sqlite(file=OSPath, query="SELECT * FROM ActivityOperation")})
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.forensics.recentfilecache/index.html b/exchange/artifacts/pages/windows.forensics.recentfilecache/index.html
index aa582135ce6..98378e09948 100644
--- a/exchange/artifacts/pages/windows.forensics.recentfilecache/index.html
+++ b/exchange/artifacts/pages/windows.forensics.recentfilecache/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Forensics.RecentFileCache :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.forensics.recentfilecache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.forensics.recentfilecache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -104,4 +104,4 @@
         WHERE FullPath =~ FullPathRegex
             AND Binary =~ BinaryRegex
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.generic.internet.blockaccess/index.html b/exchange/artifacts/pages/windows.generic.internet.blockaccess/index.html
index 65c11eb78b9..e7a2abb5da9 100644
--- a/exchange/artifacts/pages/windows.generic.internet.blockaccess/index.html
+++ b/exchange/artifacts/pages/windows.generic.internet.blockaccess/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Generic.Internet.BlockAccess :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.generic.internet.blockaccess/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.generic.internet.blockaccess/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -267,4 +267,4 @@
                           c=final_check)
                   })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.kapefiles.remapping/index.html b/exchange/artifacts/pages/windows.kapefiles.remapping/index.html
index 16680319662..7d01e2e0c41 100644
--- a/exchange/artifacts/pages/windows.kapefiles.remapping/index.html
+++ b/exchange/artifacts/pages/windows.kapefiles.remapping/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.KapeFiles.Remapping :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.kapefiles.remapping/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.kapefiles.remapping/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -200,4 +200,4 @@
         SELECT remap(clear=TRUE, config=CommonMount + join(array=Parts.Mount))
         FROM scope()
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.nirsoft.lastactivityview/index.html b/exchange/artifacts/pages/windows.nirsoft.lastactivityview/index.html
index 925397c868d..e9f84397bdf 100644
--- a/exchange/artifacts/pages/windows.nirsoft.lastactivityview/index.html
+++ b/exchange/artifacts/pages/windows.nirsoft.lastactivityview/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Custom.Windows.Nirsoft.LastActivityView :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.nirsoft.lastactivityview/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.nirsoft.lastactivityview/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -117,4 +117,4 @@
         -- Parse CSV to Notebook
         SELECT * FROM parse_csv(filename= TmpDir + "\\" + Hostname.Host[0] + "-LastActivityView.csv")
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.ntfs.mft.hivenightmare/index.html b/exchange/artifacts/pages/windows.ntfs.mft.hivenightmare/index.html
index 1f2ec4300af..5dd7aa7c004 100644
--- a/exchange/artifacts/pages/windows.ntfs.mft.hivenightmare/index.html
+++ b/exchange/artifacts/pages/windows.ntfs.mft.hivenightmare/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.NTFS.MFT.HiveNightmare :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.ntfs.mft.hivenightmare/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.ntfs.mft.hivenightmare/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -171,4 +171,4 @@
            SELECT * FROM mftsearch(MFTPath=MFTFilename)
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.office.mru/index.html b/exchange/artifacts/pages/windows.office.mru/index.html
index ea4e36a28da..714b7556c55 100644
--- a/exchange/artifacts/pages/windows.office.mru/index.html
+++ b/exchange/artifacts/pages/windows.office.mru/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Office.MRU :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.office.mru/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.office.mru/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -98,4 +98,4 @@
         FROM
             glob(globs=OfficeMRU_RegistryGlob, accessor='reg')
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.persistencesniper/index.html b/exchange/artifacts/pages/windows.persistencesniper/index.html
index 001d5a356da..893e7fc57a2 100644
--- a/exchange/artifacts/pages/windows.persistencesniper/index.html
+++ b/exchange/artifacts/pages/windows.persistencesniper/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.PersistenceSniper :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.persistencesniper/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.persistencesniper/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -103,4 +103,4 @@
                 SELECT * FROM parse_json_array(data=Stdout) where log(message=Stdout) AND log(message=Stderr)
             })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.registry.bulk.computername/index.html b/exchange/artifacts/pages/windows.registry.bulk.computername/index.html
index 55ce9e90edb..b12b0bd6ceb 100644
--- a/exchange/artifacts/pages/windows.registry.bulk.computername/index.html
+++ b/exchange/artifacts/pages/windows.registry.bulk.computername/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.Bulk.ComputerName :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.registry.bulk.computername/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.registry.bulk.computername/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -138,4 +138,4 @@
                 SysHivePth = Drive + HiveLocation)
         })
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.registry.capabilityaccessmanager/index.html b/exchange/artifacts/pages/windows.registry.capabilityaccessmanager/index.html
index 024661cb487..b67c741f0c2 100644
--- a/exchange/artifacts/pages/windows.registry.capabilityaccessmanager/index.html
+++ b/exchange/artifacts/pages/windows.registry.capabilityaccessmanager/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.CapabilityAccessManager :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.registry.capabilityaccessmanager/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.registry.capabilityaccessmanager/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -117,4 +117,4 @@
                 }
             )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.registry.comautoapprovallist/index.html b/exchange/artifacts/pages/windows.registry.comautoapprovallist/index.html
index 48cdd14a5c9..47b08494363 100644
--- a/exchange/artifacts/pages/windows.registry.comautoapprovallist/index.html
+++ b/exchange/artifacts/pages/windows.registry.comautoapprovallist/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.COMAutoApprovalList :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.registry.comautoapprovallist/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.registry.comautoapprovallist/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -101,4 +101,4 @@
              Mtime
       FROM glob(globs=KeyGlob, accessor="registry") ORDER BY Mtime DESC
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.registry.disabledcortexxdr/index.html b/exchange/artifacts/pages/windows.registry.disabledcortexxdr/index.html
index 6c24eb5fe3c..3c946c281a8 100644
--- a/exchange/artifacts/pages/windows.registry.disabledcortexxdr/index.html
+++ b/exchange/artifacts/pages/windows.registry.disabledcortexxdr/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.CortexEDRDisabled :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.registry.disabledcortexxdr/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.registry.disabledcortexxdr/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -88,4 +88,4 @@
     query: |
       SELECT Name,Data.value as DllName,Fqdn FROM glob(globs=KeyGlob, accessor="reg") WHERE NOT DllName =~ "cryptsvc\.dll"
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.registry.domainname/index.html b/exchange/artifacts/pages/windows.registry.domainname/index.html
index 3a98ba7ec07..b724e478eb5 100644
--- a/exchange/artifacts/pages/windows.registry.domainname/index.html
+++ b/exchange/artifacts/pages/windows.registry.domainname/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.Domain :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.registry.domainname/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.registry.domainname/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -89,4 +89,4 @@
                 Data.value as registry_value
             FROM glob(globs=DomainHive, accessor="registry")
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.registry.netshhelperdlls/index.html b/exchange/artifacts/pages/windows.registry.netshhelperdlls/index.html
index 643abbaa427..fccc588a8ad 100644
--- a/exchange/artifacts/pages/windows.registry.netshhelperdlls/index.html
+++ b/exchange/artifacts/pages/windows.registry.netshhelperdlls/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.NetshHelperDLLs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.registry.netshhelperdlls/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.registry.netshhelperdlls/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -144,4 +144,4 @@
             then={ SELECT * FROM filteredResults},
             else={ SELECT * FROM Results})
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.registry.printnightmare/index.html b/exchange/artifacts/pages/windows.registry.printnightmare/index.html
index 075db77a2e4..063e36e2771 100644
--- a/exchange/artifacts/pages/windows.registry.printnightmare/index.html
+++ b/exchange/artifacts/pages/windows.registry.printnightmare/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.PrintNightmare :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.registry.printnightmare/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.registry.printnightmare/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -124,4 +124,4 @@
   - name: Modified
     type: timestamp
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.registry.taskcache.hiddentasks/index.html b/exchange/artifacts/pages/windows.registry.taskcache.hiddentasks/index.html
index 473bf8eebcc..2080cb8662c 100644
--- a/exchange/artifacts/pages/windows.registry.taskcache.hiddentasks/index.html
+++ b/exchange/artifacts/pages/windows.registry.taskcache.hiddentasks/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Registry.TaskCache.HiddenTasks :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.registry.taskcache.hiddentasks/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.registry.taskcache.hiddentasks/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -103,4 +103,4 @@
                       })
 
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.services.hijacking/index.html b/exchange/artifacts/pages/windows.services.hijacking/index.html
index aa7f4b216d5..ea038a2417c 100644
--- a/exchange/artifacts/pages/windows.services.hijacking/index.html
+++ b/exchange/artifacts/pages/windows.services.hijacking/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Custom.Windows.Services.Hijacking :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.services.hijacking/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.services.hijacking/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -168,4 +168,4 @@
             }
         )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.sys.bitlocker/index.html b/exchange/artifacts/pages/windows.sys.bitlocker/index.html
new file mode 100644
index 00000000000..01e5fa34f3b
--- /dev/null
+++ b/exchange/artifacts/pages/windows.sys.bitlocker/index.html
@@ -0,0 +1,106 @@
+<!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Sys.BitLocker :: Velociraptor - Digging deeper!</title>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.sys.bitlocker/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/overview/>Velociraptor Overview</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/history/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/overview/history/>History</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/overview/support/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/overview/support/>Support Policy</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/deployment/>Deployment</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/deployment/self-signed/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/self-signed/>Self-Signed SSL</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/cloud/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/deployment/cloud/>Cloud Deployment</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/deployment/cloud/multifrontend/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/cloud/multifrontend/>Multi-Frontend</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/clients/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/clients/>Deploying Clients</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/rbac/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/rbac/>Users and Roles</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/resources/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/resources/>Performance</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/troubleshooting/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/troubleshooting/>Troubleshooting</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/deployment/references/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/deployment/references/>Config Reference</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/gui/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/gui/>The Admin GUI</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/gui/clients/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/gui/clients/>Inspecting clients</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/gui/vfs/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/gui/vfs/>The VFS</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/gui/artifacts/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/gui/artifacts/>Artifacts</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/gui/hunting/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/gui/hunting/>Hunting</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/vql/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/vql/>VQL Fundamentals</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/vql/notebooks/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/vql/notebooks/>Notebooks</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/vql/artifacts/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/vql/artifacts/>Artifacts</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/vql/events/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/vql/events/>Event Queries</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/forensic/>Forensic Analysis</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/forensic/filesystem/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/filesystem/>Searching Filenames</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/searching/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/searching/>Searching Content</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/ntfs/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/ntfs/>NTFS Analysis</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/binary/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/binary/>Binary parsing</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/evidence_of_execution/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/evidence_of_execution/>Evidence Of Execution</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/event_logs/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/event_logs/>Event Logs</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/forensic/volatile/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/forensic/volatile/>Volatile State</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/offline_triage/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/offline_triage/>Triage and acquisition</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/offline_triage/remote_uploads/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/offline_triage/remote_uploads/>Remote Uploads</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/client_monitoring/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/client_monitoring/>Client Monitoring</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/extending_vql/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/extending_vql/>Extending VQL</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/server_automation/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/docs/server_automation/>Server Automation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/server_automation/server_api/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/server_automation/server_api/>Server API</a></div></li><li data-nav-id=https://docs.velociraptor.app/docs/server_automation/server_monitoring/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/docs/server_automation/server_monitoring/>Server Monitoring</a></div></li></ul></li></ul></li><hr><li data-nav-id=https://docs.velociraptor.app/vql_reference/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/vql_reference/><i class="fas fa-book"></i>VQL Reference</a></div><ul><li data-nav-id=https://docs.velociraptor.app/vql_reference/basic/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/basic/>Basic VQL</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/linux/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/linux/>Linux Specific</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/windows/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/windows/>Windows Specific</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/parsers/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/parsers/>Parsers</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/server/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/server/>Server Side</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/plugin/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/plugin/>Client Side</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/event/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/event/>Event Plugins</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/experimental/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/experimental/>Experimental</a></div></li><li data-nav-id=https://docs.velociraptor.app/vql_reference/misc/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/vql_reference/misc/>Misc</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/training/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/training/><i class="fas fa-graduation-cap"></i>Training</a></div></li><li data-nav-id=https://docs.velociraptor.app/blog/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/blog/><i class="fas fa-newspaper"></i>Blog</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<a href=/presentations/><i class="fas fa-chalkboard-teacher"></i>Presentations</a></div><ul><li data-nav-id=https://docs.velociraptor.app/presentations/2022_linuxconf_au/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_linuxconf_au/>Linux Conf Au 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2022_auscert/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_auscert/>Auscert 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2022_dfrws_us/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_dfrws_us/>DFRWS US 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2022_tech_user_group_cbr/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_tech_user_group_cbr/>Tech Users Group 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2022_sans_summit/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_sans_summit/>SANS Summit 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2022_velocon/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_velocon/>Velocon 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2022_dfrws_apac/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2022_dfrws_apac/>DFRWS APAC 2022</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2023_everything_open/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2023_everything_open/>EverythingOpen 2023</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2023_auscert/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2023_auscert/>Auscert 2023</a></div></li><li data-nav-id=https://docs.velociraptor.app/presentations/2023_velocon/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/presentations/2023_velocon/>VeloCON 2023</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/exchange/ class="dd-item parent haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/exchange/><i class="fas fa-code"></i>Artifact Exchange</a></div></li><li data-nav-id=https://docs.velociraptor.app/artifact_references/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/artifact_references/><i class="fas fa-book"></i>Artifact Reference</a></div></li><li data-nav-id=https://docs.velociraptor.app/knowledge_base/ class="dd-item haschildren"><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/knowledge_base/><i class="fas fa-brain"></i>Knowledge Base</a></div></li><li data-nav-id=https://docs.velociraptor.app/search/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
+<a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
+<img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=top-github-link><a class=github-link title='Edit this page' href=https://github.com/Velocidex/velociraptor-docs/edit/master/content/exchange/artifacts/Windows.Sys.BitLocker.yaml target=blank><i class="fas fa-code-branch"></i>
+<span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
+</a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
+<span class=links>Windows.Sys.BitLocker</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Windows.Sys.BitLocker</h1><p>This artifact gets all Bitlocker volumes using PowerShell, including the recovery password.</p><pre><code class=language-yaml>
+name: Windows.Sys.BitLocker
+author: Zane Gittins
+description: |
+   This artifact gets all Bitlocker volumes using PowerShell, including the recovery password.
+
+# Can be CLIENT, CLIENT_EVENT, SERVER, SERVER_EVENT
+type: CLIENT
+
+sources:
+  - precondition:
+      SELECT OS From info() where OS = 'windows'
+
+    query: |
+        LET PowershellScript = '''$Results = @()
+        $BitlockerVolumes = Get-BitLockerVolume
+        $BitlockerVolumes |
+        ForEach-Object {
+            $RecoveryKey = [string]($_.KeyProtector).RecoveryPassword
+            # Only add results with valid recovery keys.
+            if ($RecoveryKey.Length -gt 5) {
+                $_ | Add-Member -MemberType NoteProperty -Name "RecoveryPassword" -Value $RecoveryKey
+                $Results += $_
+            }
+        }
+        return ($Results | ConvertTo-Json)'''
+        SELECT * FROM foreach(
+          row={
+            SELECT Stdout FROM execve(argv=["Powershell", "-ExecutionPolicy",
+                "unrestricted", "-c", PowershellScript], length=1000000)
+          }, query={
+            SELECT * FROM parse_json_array(data=Stdout)
+        })
+
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.sys.loggedinusers/index.html b/exchange/artifacts/pages/windows.sys.loggedinusers/index.html
index 3ea896c8131..64219e81c29 100644
--- a/exchange/artifacts/pages/windows.sys.loggedinusers/index.html
+++ b/exchange/artifacts/pages/windows.sys.loggedinusers/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Sys.LoggedInUsers :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.sys.loggedinusers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.sys.loggedinusers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -104,4 +104,4 @@
 
       SELECT * FROM foreach(row=CurrentlyLoggedIn, query=Sessions)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.system.accesscontrollist/index.html b/exchange/artifacts/pages/windows.system.accesscontrollist/index.html
index e4a6099d1f5..022ee0fc724 100644
--- a/exchange/artifacts/pages/windows.system.accesscontrollist/index.html
+++ b/exchange/artifacts/pages/windows.system.accesscontrollist/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.AccessControlList :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.system.accesscontrollist/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.system.accesscontrollist/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -108,4 +108,4 @@
         })
         WHERE ACLS =~ ACLFilter
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.system.appcompatpca/index.html b/exchange/artifacts/pages/windows.system.appcompatpca/index.html
index 657240bb546..12bc6b9faa9 100644
--- a/exchange/artifacts/pages/windows.system.appcompatpca/index.html
+++ b/exchange/artifacts/pages/windows.system.appcompatpca/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.AppCompatPCA :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.system.appcompatpca/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.system.appcompatpca/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -135,4 +135,4 @@
             then=include_vss,
             else=exclude_vss)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.system.services.sliverpsexec/index.html b/exchange/artifacts/pages/windows.system.services.sliverpsexec/index.html
index ff09815190f..ae3fd721658 100644
--- a/exchange/artifacts/pages/windows.system.services.sliverpsexec/index.html
+++ b/exchange/artifacts/pages/windows.system.services.sliverpsexec/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.Services.SliverPsexec :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.system.services.sliverpsexec/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.system.services.sliverpsexec/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -96,4 +96,4 @@
 
 
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.system.windowserrorreporting/index.html b/exchange/artifacts/pages/windows.system.windowserrorreporting/index.html
index b570e3ef2cc..adb245a832b 100644
--- a/exchange/artifacts/pages/windows.system.windowserrorreporting/index.html
+++ b/exchange/artifacts/pages/windows.system.windowserrorreporting/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.WindowsErrorReporting :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.system.windowserrorreporting/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.system.windowserrorreporting/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -167,4 +167,4 @@
         SELECT *
         FROM parsed_reports
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.system.wmiproviders/index.html b/exchange/artifacts/pages/windows.system.wmiproviders/index.html
index d45dce9a702..b193f390e44 100644
--- a/exchange/artifacts/pages/windows.system.wmiproviders/index.html
+++ b/exchange/artifacts/pages/windows.system.wmiproviders/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.System.WMIProviders :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.system.wmiproviders/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.system.wmiproviders/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -122,4 +122,4 @@
             then=NOT BinaryPath =~ BinaryExcludeRegex,
             else=TRUE)
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.timeline.prefetch.improved/index.html b/exchange/artifacts/pages/windows.timeline.prefetch.improved/index.html
index a607505d258..d8338a7e800 100644
--- a/exchange/artifacts/pages/windows.timeline.prefetch.improved/index.html
+++ b/exchange/artifacts/pages/windows.timeline.prefetch.improved/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Timeline.Prefetch.Improved :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.timeline.prefetch.improved/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.timeline.prefetch.improved/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -187,4 +187,4 @@
       })
       ORDER BY event_time
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/windows.triage.highvaluememory/index.html b/exchange/artifacts/pages/windows.triage.highvaluememory/index.html
index 574e470015b..594ffe9a311 100644
--- a/exchange/artifacts/pages/windows.triage.highvaluememory/index.html
+++ b/exchange/artifacts/pages/windows.triage.highvaluememory/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Triage.HighValueMemory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.triage.highvaluememory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/windows.triage.highvaluememory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -135,4 +135,4 @@
               }
             )
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/wmieventing/index.html b/exchange/artifacts/pages/wmieventing/index.html
index edcf705415c..1732e70ef26 100644
--- a/exchange/artifacts/pages/wmieventing/index.html
+++ b/exchange/artifacts/pages/wmieventing/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.ETW.WMIEventing :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/wmieventing/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/wmieventing/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -152,4 +152,4 @@
             AND Operation =~ 'WbemServices::(PutInstance|DeleteInstance|PutClass|DeleteClass)'
             AND Operation =~ 'EventConsumer|EventFilter|FilterToConsumerBinding'
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/ws_ftp/index.html b/exchange/artifacts/pages/ws_ftp/index.html
index 153cf87896e..f4f3c3912d4 100644
--- a/exchange/artifacts/pages/ws_ftp/index.html
+++ b/exchange/artifacts/pages/ws_ftp/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.WS_FTP :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/ws_ftp/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/ws_ftp/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -247,4 +247,4 @@
   - name: EventTime
     type: timestamp
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/artifacts/pages/yara.uefi/index.html b/exchange/artifacts/pages/yara.uefi/index.html
index cc80068ab77..2af7e2e89d1 100644
--- a/exchange/artifacts/pages/yara.uefi/index.html
+++ b/exchange/artifacts/pages/yara.uefi/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows.Detection.Yara.UEFI :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/yara.uefi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/artifacts/pages/yara.uefi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -247,4 +247,4 @@
   - name: HitContext
     type: preview_upload
 
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/exchange/data.json b/exchange/data.json
index 3bd44fa7054..74530e38a25 100644
--- a/exchange/data.json
+++ b/exchange/data.json
@@ -1,4 +1,24 @@
 [
+    {
+        "title": "Server.Import.WatchLocalDirectory",
+        "author": "bmcder02",
+        "description": "This is an artifact that will monitor a local path for collections, \nwhich it will then ingest. \n",
+        "link": "/exchange/artifacts/pages/server.import.watchlocaldirectory",
+        "tags": [],
+        "author_link": "https://github.com/bmcder02",
+        "author_avatar": "https://avatars.githubusercontent.com/u/90826967?v=4",
+        "date": "2023-11-09"
+    },
+    {
+        "title": "Server.Import.WatchS3Directory",
+        "author": "bmcder02",
+        "description": "This is an artifact that will monitor an S3 path for collections, \nwhich it will then ingest. \n",
+        "link": "/exchange/artifacts/pages/server.import.watchs3directory",
+        "tags": [],
+        "author_link": "https://github.com/bmcder02",
+        "author_avatar": "https://avatars.githubusercontent.com/u/90826967?v=4",
+        "date": "2023-11-09"
+    },
     {
         "title": "Windows.Detection.SysAid",
         "author": "mgreen27",
@@ -9,6 +29,16 @@
         "author_avatar": "https://avatars.githubusercontent.com/u/13081800?v=4",
         "date": "2023-11-09"
     },
+    {
+        "title": "Windows.Sys.BitLocker",
+        "author": "zaneGittins",
+        "description": "This artifact gets all Bitlocker volumes using PowerShell, including the recovery password.\n",
+        "link": "/exchange/artifacts/pages/windows.sys.bitlocker",
+        "tags": [],
+        "author_link": "https://github.com/zaneGittins",
+        "author_avatar": "https://avatars.githubusercontent.com/u/22203776?v=4",
+        "date": "2023-11-09"
+    },
     {
         "title": "Windows.Applications.FreeFileSync",
         "author": "freeze-syn",
diff --git a/exchange/index.html b/exchange/index.html
index 72fd86d2142..f51d85b953e 100644
--- a/exchange/index.html
+++ b/exchange/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Artifact Exchange :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/exchange/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -102,4 +102,4 @@
       </div>
      </div>
    </div>
-  </div>`);n.find(".title").append(t.title),n.find(".user-name-link").append(t.author),n.find(".description").append(t.description),n.find(".user-name-link").attr("href",t.author_link),n.find(".user-avatar").attr("src",t.author_avatar),n.find(".title").attr("href",t.link),n.find(".date").append(t.date);for(let e=0;e<t.tags.length;e++){let s=t.tags[e];n.find(".idea-tag").append($(`<a class="tag">`).attr("href","/tags/"+s).append(`<i class="linkcolour tag label label-success">`+s+`</i>&nbsp;`))}let o=$(".search_results").append(n)}}</script><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+  </div>`);n.find(".title").append(t.title),n.find(".user-name-link").append(t.author),n.find(".description").append(t.description),n.find(".user-name-link").attr("href",t.author_link),n.find(".user-avatar").attr("src",t.author_avatar),n.find(".title").attr("href",t.link),n.find(".date").append(t.date);for(let e=0;e<t.tags.length;e++){let s=t.tags[e];n.find(".idea-tag").append($(`<a class="tag">`).attr("href","/tags/"+s).append(`<i class="linkcolour tag label label-success">`+s+`</i>&nbsp;`))}let o=$(".search_results").append(n)}}</script><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/exchange/index.xml b/exchange/index.xml
index 085fe4007a0..329113a140b 100644
--- a/exchange/index.xml
+++ b/exchange/index.xml
@@ -1,5 +1,7 @@
-<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Velociraptor Artifact Exchange</title><link>https://docs.velociraptor.app/exchange/</link><description>Recent content in Artifact Exchange on Velociraptor - Digging deeper!</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Sat, 12 Jun 2021 14:03:59 +0000</lastBuildDate><atom:link href="https://docs.velociraptor.app/exchange/index.xml" rel="self" type="application/rss+xml"/><item><title>Windows.Detection.SysAid</title><link>https://docs.velociraptor.app/exchange/artifacts/pages/sysaid</link><pubDate>Thu, 09 Nov 2023 00:00:00 +0000</pubDate><guid>https://docs.velociraptor.app//exchange/artifacts/pages/sysaid</guid><description>This artifact detects artifacts associated with post exploitation activity of
-LaceTempest related to the SysAid 0day.</description></item><item><title>Windows.Applications.FreeFileSync</title><link>https://docs.velociraptor.app/exchange/artifacts/pages/windows.applications.freefilesync</link><pubDate>Tue, 07 Nov 2023 00:00:00 +0000</pubDate><guid>https://docs.velociraptor.app//exchange/artifacts/pages/windows.applications.freefilesync</guid><description>This artefact can be used to retrieve and parse some GoodSync file in order to:
+<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Velociraptor Artifact Exchange</title><link>https://docs.velociraptor.app/exchange/</link><description>Recent content in Artifact Exchange on Velociraptor - Digging deeper!</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Sat, 12 Jun 2021 14:03:59 +0000</lastBuildDate><atom:link href="https://docs.velociraptor.app/exchange/index.xml" rel="self" type="application/rss+xml"/><item><title>Server.Import.WatchLocalDirectory</title><link>https://docs.velociraptor.app/exchange/artifacts/pages/server.import.watchlocaldirectory</link><pubDate>Thu, 09 Nov 2023 00:00:00 +0000</pubDate><guid>https://docs.velociraptor.app//exchange/artifacts/pages/server.import.watchlocaldirectory</guid><description>This is an artifact that will monitor a local path for collections,
+which it will then ingest.</description></item><item><title>Server.Import.WatchS3Directory</title><link>https://docs.velociraptor.app/exchange/artifacts/pages/server.import.watchs3directory</link><pubDate>Thu, 09 Nov 2023 00:00:00 +0000</pubDate><guid>https://docs.velociraptor.app//exchange/artifacts/pages/server.import.watchs3directory</guid><description>This is an artifact that will monitor an S3 path for collections,
+which it will then ingest.</description></item><item><title>Windows.Detection.SysAid</title><link>https://docs.velociraptor.app/exchange/artifacts/pages/sysaid</link><pubDate>Thu, 09 Nov 2023 00:00:00 +0000</pubDate><guid>https://docs.velociraptor.app//exchange/artifacts/pages/sysaid</guid><description>This artifact detects artifacts associated with post exploitation activity of
+LaceTempest related to the SysAid 0day.</description></item><item><title>Windows.Sys.BitLocker</title><link>https://docs.velociraptor.app/exchange/artifacts/pages/windows.sys.bitlocker</link><pubDate>Thu, 09 Nov 2023 00:00:00 +0000</pubDate><guid>https://docs.velociraptor.app//exchange/artifacts/pages/windows.sys.bitlocker</guid><description>This artifact gets all Bitlocker volumes using PowerShell, including the recovery password.</description></item><item><title>Windows.Applications.FreeFileSync</title><link>https://docs.velociraptor.app/exchange/artifacts/pages/windows.applications.freefilesync</link><pubDate>Tue, 07 Nov 2023 00:00:00 +0000</pubDate><guid>https://docs.velociraptor.app//exchange/artifacts/pages/windows.applications.freefilesync</guid><description>This artefact can be used to retrieve and parse some GoodSync file in order to:
 - Identify the latest account used to transfer data and the remote ip adresse destination in the case of SFTP protocol with the qeury GlobalInfo
 - Identify the latest transfered files with Latest Data Transfer
 - Identify the presence of others interesting logs about previous or attempt of files transfer</description></item><item><title>Windows.Applications.GoodSync</title><link>https://docs.velociraptor.app/exchange/artifacts/pages/windows.applications.goodsync</link><pubDate>Tue, 07 Nov 2023 00:00:00 +0000</pubDate><guid>https://docs.velociraptor.app//exchange/artifacts/pages/windows.applications.goodsync</guid><description>This artefact can be used to retrieve and parse some GoodSync file in order to
@@ -44,4 +46,4 @@ https://github.com/dfir-iris/iris-web/releases/tag/v2.1.0</description></item><i
 This artifact by itself only indicates that the PowerPick tool may have
 been invoked on the client. To capture additional context, ensure that
 Powershell script block and module logging are enabled on the clients and
-deploy the Windows.ETW.Powershell artifact from the Exchange.</description></item><item><title>Windows.Carving.BumbleBee</title><link>https://docs.velociraptor.app/exchange/artifacts/pages/bumblebee</link><pubDate>Wed, 12 Apr 2023 00:00:00 +0000</pubDate><guid>https://docs.velociraptor.app//exchange/artifacts/pages/bumblebee</guid><description>This artficat will detect running BumbleBee processes and subsequently extract the command and control servers with the destination port 443.</description></item><item><title>Server.Telegram.Clients.Enrolled</title><link>https://docs.velociraptor.app/exchange/artifacts/pages/server.telegram.clients.enrolled</link><pubDate>Tue, 11 Apr 2023 00:00:00 +0000</pubDate><guid>https://docs.velociraptor.app//exchange/artifacts/pages/server.telegram.clients.enrolled</guid><description>Send a message to telegram when clients become enrolled.</description></item><item><title>Windows.Registry.Domain</title><link>https://docs.velociraptor.app/exchange/artifacts/pages/windows.registry.domainname</link><pubDate>Wed, 05 Apr 2023 00:00:00 +0000</pubDate><guid>https://docs.velociraptor.app//exchange/artifacts/pages/windows.registry.domainname</guid><description>Checks the configured domain name on each endpoint</description></item></channel></rss>
\ No newline at end of file
+deploy the Windows.ETW.Powershell artifact from the Exchange.</description></item></channel></rss>
\ No newline at end of file
diff --git a/golang/index.html b/golang/index.html
index 965995f4391..ce290228b0b 100644
--- a/golang/index.html
+++ b/golang/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Other Velocidex Projects :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/golang/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/golang/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=top-github-link><a class=github-link title='Edit this page' href=https://github.com/Velocidex/velociraptor-docs/edit/master/content/golang/_index.md target=blank><i class="fas fa-code-branch"></i>
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>Other Velocidex Projects</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Other Velocidex Projects</h1><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<span class=links>Other Velocidex Projects</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Other Velocidex Projects</h1><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/index.html b/index.html
index 9329dbaa15c..47fdbe0b532 100644
--- a/index.html
+++ b/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Welcome :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527371 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527371 rel=stylesheet><link href=/css/featherlight.min.css?1699527371 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527371 rel=stylesheet><link href=/css/auto-complete.css?1699527371 rel=stylesheet><link href=/css/theme.css?1699527371 rel=stylesheet><link href=/css/tabs.css?1699527371 rel=stylesheet><link href=/css/hugo-theme.css?1699527371 rel=stylesheet><link href=/css/theme-mine.css?1699527371 rel=stylesheet><link href=/css/dark.css?1699527371 rel=stylesheet><link href=/css/syntax.css?1699527371 rel=stylesheet><link href=/css/light.css?1699527371 rel=stylesheet><link href=/css/hljs.css?1699527371 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527371 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527371></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div id=head-tags></div><div id=body-inner><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i> navigation</a></span><div class="mynotices warning"><div heading=" CVE-2023-5950 published on 2023-11-06 "><p>Please upgrade your servers to mitigate <code>CVE-2023-5950</code> to at least release <code>0.7.0-4</code> or <code>0.6.9-1</code>.</p><p><a href=/announcements/2023-cves/>More details</a></p></div></div><h2 id=velociraptor---digging-deeper>Velociraptor - Digging Deeper!</h2><p>Velociraptor is an advanced digital forensic and incident response
 tool that enhances your visibility into your endpoints.</p><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js></script><div class=carousel-row><script>function selectButton(e){$(".topic").removeClass("btn-primary"),$(e).removeClass("btn-secondary").addClass("btn-primary")}</script><div class="col-sm-3 carousel-choices"><button type=button class="btn btn-primary btn-lg btn-block topic" data-target=#myCarousel data-slide-to=0 onclick=selectButton(this)><div class=logo-btn><i class="fas fa-laptop"></i> Collect</div></button><button type=button class="btn btn-secondary btn-lg btn-block topic" data-target=#myCarousel data-slide-to=1 onclick=selectButton(this)><div class=logo-btn><i class="fas fa-eye"></i> Monitor</div></button><button type=button class="btn btn-secondary btn-lg btn-block topic" data-target=#myCarousel data-slide-to=2 onclick=selectButton(this)><div class=logo-btn><i class="fas fa-bullseye"></i> Hunt</div></button></div><div id=myCarousel class="carousel slide col-sm-9"><ol class=carousel-indicators><li data-target=#myCarousel data-slide-to=0></li><li data-target=#myCarousel data-slide-to=1></li><li data-target=#myCarousel data-slide-to=2></li></ol><div class=carousel-inner role=listbox><div class="item active"><div class=content>At the press of a (few) buttons, perform targeted collection of digital forensic evidence simultaneously across your endpoints, with speed and precision.
-<img src=collect.png></div></div><div class=item><div class=content>Continuously collect endpoint events such as event logs, file modifications and process execution. Centrally store events indefinitely for historical review and analysis.<img src=monitoring.png></div></div><div class=item><div class=content>Don't wait until an event occurs. Actively search for suspicious activities using our library of forensic artifacts, then customize to your specific threat hunting needs.<img src=hunt.png></div></div></div></div></div></div></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526434></script><script src=/js/perfect-scrollbar.min.js?1699526434></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526434></script><script src=/js/jquery.sticky.js?1699526434></script><script src=/js/featherlight.min.js?1699526434></script><script src=/js/highlight.min.js?1699526434></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526434></script><script src=/js/learn.js?1699526434></script><script src=/js/hugo-learn.js?1699526434></script></body></html>
\ No newline at end of file
+<img src=collect.png></div></div><div class=item><div class=content>Continuously collect endpoint events such as event logs, file modifications and process execution. Centrally store events indefinitely for historical review and analysis.<img src=monitoring.png></div></div><div class=item><div class=content>Don't wait until an event occurs. Actively search for suspicious activities using our library of forensic artifacts, then customize to your specific threat hunting needs.<img src=hunt.png></div></div></div></div></div></div></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527371></script><script src=/js/perfect-scrollbar.min.js?1699527371></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527371></script><script src=/js/jquery.sticky.js?1699527371></script><script src=/js/featherlight.min.js?1699527371></script><script src=/js/highlight.min.js?1699527371></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527371></script><script src=/js/learn.js?1699527371></script><script src=/js/hugo-learn.js?1699527371></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/index.html b/knowledge_base/index.html
index 5d6162027f4..665cf538b8d 100644
--- a/knowledge_base/index.html
+++ b/knowledge_base/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Knowledge Base :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526434 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526434 rel=stylesheet><link href=/css/featherlight.min.css?1699526434 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526434 rel=stylesheet><link href=/css/auto-complete.css?1699526434 rel=stylesheet><link href=/css/theme.css?1699526434 rel=stylesheet><link href=/css/tabs.css?1699526434 rel=stylesheet><link href=/css/hugo-theme.css?1699526434 rel=stylesheet><link href=/css/theme-mine.css?1699526434 rel=stylesheet><link href=/css/dark.css?1699526434 rel=stylesheet><link href=/css/syntax.css?1699526434 rel=stylesheet><link href=/css/light.css?1699526434 rel=stylesheet><link href=/css/hljs.css?1699526434 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526434 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526434></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -117,4 +117,4 @@
       <img class="user-avatar inline">
     </div>
   </div>
-</div>`);n.find(".title").append(t.title),n.find(".user-name-link").append(t.author),n.find(".description").append(t.description),n.find(".user-name-link").attr("href",t.author_link),n.find(".user-avatar").attr("src",t.author_avatar),n.find(".title").attr("href",t.link),n.find(".date").append(t.date);for(let e=0;e<t.tags.length;e++){let s=t.tags[e];n.find(".idea-tag").append($(`<a class="tag">`).attr("href","/tags/"+s).append(`<i class="linkcolour tag label label-success">`+s+`</i>&nbsp;`))}let o=$(".search_results").append(n)}}</script><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</div>`);n.find(".title").append(t.title),n.find(".user-name-link").append(t.author),n.find(".description").append(t.description),n.find(".user-name-link").attr("href",t.author_link),n.find(".user-avatar").attr("src",t.author_avatar),n.find(".title").attr("href",t.link),n.find(".date").append(t.date);for(let e=0;e<t.tags.length;e++){let s=t.tags[e];n.find(".idea-tag").append($(`<a class="tag">`).attr("href","/tags/"+s).append(`<i class="linkcolour tag label label-success">`+s+`</i>&nbsp;`))}let o=$(".search_results").append(n)}}</script><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/automate_offline_collector/index.html b/knowledge_base/tips/automate_offline_collector/index.html
index b11fffc7e49..3ffadf44d3d 100644
--- a/knowledge_base/tips/automate_offline_collector/index.html
+++ b/knowledge_base/tips/automate_offline_collector/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How can I automate the creation of the offline collector? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/automate_offline_collector/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/automate_offline_collector/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -98,4 +98,4 @@
 for the ultimate reference what each variable means).</p><p>To run the script simply create a new directory and point the script
 to the Velociraptor binary for your platform and the spec file.</p><p>The script will create a small Velociraptor deployment in the current
 directory and automatically download any third party tools needed.</p><p>The script should work with earlier versions but was tested for
-Release 0.7.0 onwards.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+Release 0.7.0 onwards.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/automating_labels/index.html b/knowledge_base/tips/automating_labels/index.html
index d8b6e097c2a..b7da1a1a6ea 100644
--- a/knowledge_base/tips/automating_labels/index.html
+++ b/knowledge_base/tips/automating_labels/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How can I automatically apply labels to clients? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/automating_labels/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/automating_labels/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -119,4 +119,4 @@
 </code></pre><p><figure><img src=artifact.png alt="Adding a new artifact" class=captioned><figcaption>Adding a new artifact</figcaption></figure></p><p>Now we can enable monitoring of these events by adding the artifact to
 the server event table</p><p><figure><img src=installing_event_monitoring.png alt="Installing server event monitoring" class=captioned><figcaption>Installing server event monitoring</figcaption></figure></p><div class="mynotices tip"><div heading=" Refreshing labels "><p>The above artifact will automatically label clients when the <code>Generic.Client.Info</code> collection is run on the clients. This collection runs when the client is first seen but you can run it at any time.</p><p>To relabel all clients - even after they were enrolled, you can just
 start a hunt for <code>Generic.Client.Info</code> at any time.</p><p>Note that labels are either Set or Cleared for it is fine to re-apply
-the label many times.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+the label many times.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/clone_organization_to_other_server/index.html b/knowledge_base/tips/clone_organization_to_other_server/index.html
index 4382ae16e7a..64415a34a1e 100644
--- a/knowledge_base/tips/clone_organization_to_other_server/index.html
+++ b/knowledge_base/tips/clone_organization_to_other_server/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How can I clone an organization with all its hunts and artifacts to another instance? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/clone_organization_to_other_server/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/clone_organization_to_other_server/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -72,4 +72,4 @@
 <span class=links>How can I clone an organization with all its hunts and artifacts to another instance?</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#exporting>Exporting</a></li><li><a href=#importing>Importing</a></li></ul></nav></div></div></div></div><div id=head-tags><div class=tags><a class=tag-link href=/tags/archiving>archiving</a>
 <a class=tag-link href=/tags/orgs>orgs</a>
 <a class=tag-link href=/tags/deployment>deployment</a></div></div><div id=body-inner><h1 id=how-can-i-clone-an-organization-with-all-its-hunts-and-artifacts-to-another-instance>How can I clone an organization with all its hunts and artifacts to another instance?</h1><p>There are a few use cases where you need to migrate data from an instance to another. It could be for educational purpose to provide pre-filled labs, or to provide a third party with the exact insights you had during your investigation. Event for archiving, being able to reload a dataset in Velociraptor to review what was done if something went amiss, being able to export and import an organization dataset could prove useful.</p><h2 id=exporting>Exporting</h2><p>Everything related to an organization is stored in a directory under <code>&lt;file store>/orgs</code>. There is:</p><ul><li>A directory with the org ID</li><li>A configuration file <code>&lt;orgId>.json.db</code></li></ul><p>We need to transfer both to the destination server.</p><ol><li>Identify the org ID, either with the <a href=https://docs.velociraptor.app/artifact_references/pages/server.orgs.listorgs/><code>Server.Orgs.ListOrgs</code> Artifact</a> or scrolling down the Velociraptor <em>root org</em> home page.</li><li>Archive the folder and the <code>json.db</code> file (mind the star)</li></ol><pre><code class=language-bash>tar czf transport-&lt;org name&gt;.tar.gz &lt;file store&gt;/orgs/&lt;org id&gt;* 
-</code></pre><ol start=3><li>Transfer the resulting archive to the destination Velociraptor server.</li></ol><h2 id=importing>Importing</h2><ol><li>Decompress the archive under the <code>&lt;file store>/orgs</code> directory.</li></ol><div class="mynotices tip"><div heading=" No orgs folder "><p>The <code>orgs</code> directory is created with the first organization. After a fresh install of Velociraptor, it doesn&rsquo;t exist until you create an org. You may also simply create the directory.</p></div></div><ol start=2><li>Verify file ownership and permissions are similar to other directories in the file store</li><li>Start Velociraptor</li><li>You should see the organization with all its content as it were on the origin server</li></ol><div class="mynotices tip"><div heading=" Can't see the org "><p>Upon startup, Velociraptor will run the workers linked to the organization, so you can find a trace of it in the logs, but you may only see it in GUI if you are granted permissions on it. Just edit with your favorite text editor: <code>&lt;file store>/orgs/&lt;org id>/acl/&lt;username>.json.db</code> to give the access rights to an existing user (or create a user with the name of a user who was allowed to see the org),</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><ol start=3><li>Transfer the resulting archive to the destination Velociraptor server.</li></ol><h2 id=importing>Importing</h2><ol><li>Decompress the archive under the <code>&lt;file store>/orgs</code> directory.</li></ol><div class="mynotices tip"><div heading=" No orgs folder "><p>The <code>orgs</code> directory is created with the first organization. After a fresh install of Velociraptor, it doesn&rsquo;t exist until you create an org. You may also simply create the directory.</p></div></div><ol start=2><li>Verify file ownership and permissions are similar to other directories in the file store</li><li>Start Velociraptor</li><li>You should see the organization with all its content as it were on the origin server</li></ol><div class="mynotices tip"><div heading=" Can't see the org "><p>Upon startup, Velociraptor will run the workers linked to the organization, so you can find a trace of it in the logs, but you may only see it in GUI if you are granted permissions on it. Just edit with your favorite text editor: <code>&lt;file store>/orgs/&lt;org id>/acl/&lt;username>.json.db</code> to give the access rights to an existing user (or create a user with the name of a user who was allowed to see the org),</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/debugging_clients/index.html b/knowledge_base/tips/debugging_clients/index.html
index 4582aec8cbf..5b56dbcd44d 100644
--- a/knowledge_base/tips/debugging_clients/index.html
+++ b/knowledge_base/tips/debugging_clients/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How do I debug the client while it is running? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/debugging_clients/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/debugging_clients/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>How do I debug the client while it is running?</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#query-logs>Query logs</a></li><li><a href=#collecting-profiles>Collecting profiles</a><ul><li><a href=#references>References</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags><div class=tags><a class=tag-link href=/tags/deployment>deployment</a>
-<a class=tag-link href=/tags/debugging>debugging</a></div></div><div id=body-inner><h1 id=how-do-i-debug-the-client-while-it-is-running>How do I debug the client while it is running?</h1><p>Sometimes we collect artifacts from clients but for some reason things seem to take longer than expected. Velociraptor has mechanisms to gain visibility into how clients behave and what queries are running.</p><h2 id=query-logs>Query logs</h2><p>The first port of call is viewing the query logs in the logs tab of the relevant collection.</p><p><figure><img src=https://user-images.githubusercontent.com/3856546/159195874-ec6c8322-cb70-4254-861a-95888db94201.png alt="Viewing the query logs" class=captioned><figcaption>Viewing the query logs</figcaption></figure></p><p>As the query is running, it will emit a message to let us know that it is waiting for rows. We use this to determine that the query is still running on the client.</p><h2 id=collecting-profiles>Collecting profiles</h2><p>The <code>Generic.Client.Profile</code> artifact allows us to collect internal state of the client. Simply collect this from the client, while other queries are running</p><p><figure><img src=https://user-images.githubusercontent.com/3856546/159196011-28808471-4111-42ba-bfd3-819381bdf596.png alt="Client Profile" class=captioned><figcaption>Client Profile</figcaption></figure></p><p>The most common thing to collect include:</p><ol><li>The Goroutine dump shows a stack trace of all currently running goroutines (similar to threads). This helps us understand if there is a deadlock or another bug.</li><li>The logs delivers a recent dump of client logs. Normally the client does <strong>not</strong> write it&rsquo;s logs to file to avoid information leakage issues. You can see the logs on the console by running the client with the <code>-v</code> flag, but each client also keeps the last 1000 messages in a memory buffer so they can be available if needed. This option sends the recent logs to the server.</li><li>Query logs are a recent log of VQL queries running on the endpoint. This gives us an idea of exactly what the client is doing.</li><li>Metrics are internal program counters that provide visibility of performance related items.</li></ol><p>When asking for help on Discord or our mailing list, we will often ask for the profiles collected from the client (or server). At a minimum we will need the above items to diagnose any issues.</p><div class="mynotices tip"><div heading=tip><p>The nice thing about collecting profiles is that the client does <strong>not</strong> need to be restarted and we do not need to run a special debug build - all clients are capable of collecting profile information at any time.</p></div></div><h3 id=references>References</h3><p>You can read more about <a href=https://docs.velociraptor.app/blog/2020/2020-08-16-profiling-the-beast-58913437fd16/>profiling Velociraptor here</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<a class=tag-link href=/tags/debugging>debugging</a></div></div><div id=body-inner><h1 id=how-do-i-debug-the-client-while-it-is-running>How do I debug the client while it is running?</h1><p>Sometimes we collect artifacts from clients but for some reason things seem to take longer than expected. Velociraptor has mechanisms to gain visibility into how clients behave and what queries are running.</p><h2 id=query-logs>Query logs</h2><p>The first port of call is viewing the query logs in the logs tab of the relevant collection.</p><p><figure><img src=https://user-images.githubusercontent.com/3856546/159195874-ec6c8322-cb70-4254-861a-95888db94201.png alt="Viewing the query logs" class=captioned><figcaption>Viewing the query logs</figcaption></figure></p><p>As the query is running, it will emit a message to let us know that it is waiting for rows. We use this to determine that the query is still running on the client.</p><h2 id=collecting-profiles>Collecting profiles</h2><p>The <code>Generic.Client.Profile</code> artifact allows us to collect internal state of the client. Simply collect this from the client, while other queries are running</p><p><figure><img src=https://user-images.githubusercontent.com/3856546/159196011-28808471-4111-42ba-bfd3-819381bdf596.png alt="Client Profile" class=captioned><figcaption>Client Profile</figcaption></figure></p><p>The most common thing to collect include:</p><ol><li>The Goroutine dump shows a stack trace of all currently running goroutines (similar to threads). This helps us understand if there is a deadlock or another bug.</li><li>The logs delivers a recent dump of client logs. Normally the client does <strong>not</strong> write it&rsquo;s logs to file to avoid information leakage issues. You can see the logs on the console by running the client with the <code>-v</code> flag, but each client also keeps the last 1000 messages in a memory buffer so they can be available if needed. This option sends the recent logs to the server.</li><li>Query logs are a recent log of VQL queries running on the endpoint. This gives us an idea of exactly what the client is doing.</li><li>Metrics are internal program counters that provide visibility of performance related items.</li></ol><p>When asking for help on Discord or our mailing list, we will often ask for the profiles collected from the client (or server). At a minimum we will need the above items to diagnose any issues.</p><div class="mynotices tip"><div heading=tip><p>The nice thing about collecting profiles is that the client does <strong>not</strong> need to be restarted and we do not need to run a special debug build - all clients are capable of collecting profile information at any time.</p></div></div><h3 id=references>References</h3><p>You can read more about <a href=https://docs.velociraptor.app/blog/2020/2020-08-16-profiling-the-beast-58913437fd16/>profiling Velociraptor here</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/decimaldecode/index.html b/knowledge_base/tips/decimaldecode/index.html
index 3dda06f59c4..cf7858b6c76 100644
--- a/knowledge_base/tips/decimaldecode/index.html
+++ b/knowledge_base/tips/decimaldecode/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How can I convert decimal? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/decimaldecode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/decimaldecode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -77,4 +77,4 @@
 
 SELECT join(array=convert_decimal(data=decimal).Value,sep='') as Data FROM scope()
 
-</code></pre><p><figure><img src=https://user-images.githubusercontent.com/13081800/199373835-a27910e7-40ea-4dcc-a818-baff4e19b40c.png alt=image class=captioned><figcaption>image</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><p><figure><img src=https://user-images.githubusercontent.com/13081800/199373835-a27910e7-40ea-4dcc-a818-baff4e19b40c.png alt=image class=captioned><figcaption>image</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/deploying_in_agentless_mode/index.html b/knowledge_base/tips/deploying_in_agentless_mode/index.html
index e99c68e157d..7bc3bedb968 100644
--- a/knowledge_base/tips/deploying_in_agentless_mode/index.html
+++ b/knowledge_base/tips/deploying_in_agentless_mode/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How do I deploy the client as agentless (without install)? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/deploying_in_agentless_mode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/deploying_in_agentless_mode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -84,4 +84,4 @@
 will exit if a mutant of this name already exists.</p></div></div><h2 id=linux-environments>Linux Environments</h2><h3 id=systemd>Systemd</h3><p>It is possible to execute a program in a &ldquo;transient scope&rdquo;, which enables it to be controlled and inspected just like a regular service (unit) in Linux, without the need to create persistent configurations.
 Using <code>systemd-run</code> the process will be executed and its parent will be the <code>init</code> process, and will not terminate until the host is rebooted.</p><p>To execute the Velociraptor binary run the following:</p><pre><code>systemd-run -u velociraptor_tmp /tmp/velociraptor.bin client --config /tmp/client.config.yaml
 </code></pre><p>Once the service is running, you should now be free to terminate the SSH / management session without terminating the process.</p><p>You can manually terminate the service with: <code>systemctl stop velociraptor_tmp.service</code></p><p>You can check it&rsquo;s status with: <code>systemctl status velociraptor_tmp.service</code></p><div class="mynotices warning"><div heading=" Temporary locations "><p>On Linux /tmp is cleaned up by a service, which gets triggered on shutdown.
-You will need to arrange for the Velociraptor binary and configuration file to be transferred again if the host reboots.</p></div></div><p>You can read more about the <code>systemd-run</code> here for flags etc: <a href=https://www.freedesktop.org/software/systemd/man/systemd-run.html>https://www.freedesktop.org/software/systemd/man/systemd-run.html</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+You will need to arrange for the Velociraptor binary and configuration file to be transferred again if the host reboots.</p></div></div><p>You can read more about the <code>systemd-run</code> here for flags etc: <a href=https://www.freedesktop.org/software/systemd/man/systemd-run.html>https://www.freedesktop.org/software/systemd/man/systemd-run.html</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/favorites/index.html b/knowledge_base/tips/favorites/index.html
index 719e706ac52..e2c99dfc5c8 100644
--- a/knowledge_base/tips/favorites/index.html
+++ b/knowledge_base/tips/favorites/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How can I save my favorite collections for the future? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/favorites/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/favorites/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -92,4 +92,4 @@
 FROM scope()
 </code></pre><p>Note the <code>spec</code> parameter is a JSON encoded blob of the various
 artifact parameters.</p><p>By including the VQL in a notebook, any user can collect it and
-install the favorites in their own profile.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+install the favorites in their own profile.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/getting_latest_release/index.html b/knowledge_base/tips/getting_latest_release/index.html
index eb4524ade0c..82764c6f4c8 100644
--- a/knowledge_base/tips/getting_latest_release/index.html
+++ b/knowledge_base/tips/getting_latest_release/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How do I get the latest release binary? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/getting_latest_release/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/getting_latest_release/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -107,4 +107,4 @@
 </code></pre><div class="mynotices warning"><div heading=" API limiting "><p>GitHub limits how many unauthenticated API requests are allowed per IP
 address. If you need to increase this limit, create a personal access
 token (see
-<a href=https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token>https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token</a>)</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<a href=https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token>https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token</a>)</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/glibc_errors/index.html b/knowledge_base/tips/glibc_errors/index.html
index f3c9b68b0c9..8c2fc6966c1 100644
--- a/knowledge_base/tips/glibc_errors/index.html
+++ b/knowledge_base/tips/glibc_errors/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>What do I do about "version GLIBC_2.14 not found" errors? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/glibc_errors/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/glibc_errors/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -117,4 +117,4 @@
 the system. While this feature is considered experimental it seems to
 work well and produces truly portable binaries.</p><p>We recommend that version to only be used for clients on older
 systems, although it might also work for a server too (but really you
-should be running servers on modern patched systems).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+should be running servers on modern patched systems).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/hunt_by_label/index.html b/knowledge_base/tips/hunt_by_label/index.html
index 93504d65851..293e3b25b16 100644
--- a/knowledge_base/tips/hunt_by_label/index.html
+++ b/knowledge_base/tips/hunt_by_label/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How to control hunting by label groups? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/hunt_by_label/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/hunt_by_label/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -84,4 +84,4 @@
 automatically added to the hunt!</p><p>This means it is possible to create heavy hunts targeting specific
 labels, and then as the investigation progresses, simply assign the
 label to the client to automatically cause the hunt to collect on that
-client.</p><p><figure><img src=apply_label.png alt="Apply a label to a client to trigger hunt participation" class=captioned><figcaption>Apply a label to a client to trigger hunt participation</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+client.</p><p><figure><img src=apply_label.png alt="Apply a label to a client to trigger hunt participation" class=captioned><figcaption>Apply a label to a client to trigger hunt participation</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/huntlabel/index.html b/knowledge_base/tips/huntlabel/index.html
index aaf57ad9a56..85ba0a8a269 100644
--- a/knowledge_base/tips/huntlabel/index.html
+++ b/knowledge_base/tips/huntlabel/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Applying labels to hunt results :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/huntlabel/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/huntlabel/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -73,4 +73,4 @@
     label(client_id=ClientId,labels=['CobaltStrike'],op='set') as SetLabel
 FROM source(artifact=&quot;Windows.Carving.CobaltStrike&quot;)
 GROUP BY ClientId
-</code></pre><p><figure><img src=https://user-images.githubusercontent.com/13081800/169450498-39d31902-81ec-4b7c-8c6c-72abe0419c7e.png alt="Label clients from hunt" class=captioned><figcaption>Label clients from hunt</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><p><figure><img src=https://user-images.githubusercontent.com/13081800/169450498-39d31902-81ec-4b7c-8c6c-72abe0419c7e.png alt="Label clients from hunt" class=captioned><figcaption>Label clients from hunt</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/identifier_with_space/index.html b/knowledge_base/tips/identifier_with_space/index.html
index 56c8e1d5fb9..0efea5f5643 100644
--- a/knowledge_base/tips/identifier_with_space/index.html
+++ b/knowledge_base/tips/identifier_with_space/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>In VQL, can I SELECT a column with special characters in its name? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/identifier_with_space/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/identifier_with_space/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -74,4 +74,4 @@
 
 -- This will work because VQL will treat the entire thing as a single identifier
 SELECT `Raddr.IP` FROM ...
-</code></pre><p>You can read more about <a href=/docs/vql/#identifiers-with-spaces>VQL identifiers</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><p>You can read more about <a href=/docs/vql/#identifiers-with-spaces>VQL identifiers</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/merging_config/index.html b/knowledge_base/tips/merging_config/index.html
index 98170163d50..4bb95e2437a 100644
--- a/knowledge_base/tips/merging_config/index.html
+++ b/knowledge_base/tips/merging_config/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How can I override the configuration file? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/merging_config/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/merging_config/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -117,4 +117,4 @@
 determined by the platform. In this case it is easier to simply
 override this on the command line rather than manipulate the config
 file.</p><pre><code>velociraptor --config /etc/velociraptor/server.config.yaml frontend --config.frontend-bind-port=$PORT
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/multiparts_uploads/index.html b/knowledge_base/tips/multiparts_uploads/index.html
index db1998053f6..9937cc82608 100644
--- a/knowledge_base/tips/multiparts_uploads/index.html
+++ b/knowledge_base/tips/multiparts_uploads/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How can I make a multipart/form-data POST request in VQL :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/multiparts_uploads/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/multiparts_uploads/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -119,4 +119,4 @@
        File(Filename=&quot;Hello.txt&quot;, ParameterName=&quot;file_upload&quot;, ContentType=&quot;text/plain&quot;, Data=&quot;this is a test&quot;) +
        END)
 </code></pre><p>In this example I used some utility functions to make it easier to build the
-different parts and make sure the encoding structure is always correct.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+different parts and make sure the encoding structure is always correct.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/multiple_oauth/index.html b/knowledge_base/tips/multiple_oauth/index.html
index bd04254dda0..39dd63812dc 100644
--- a/knowledge_base/tips/multiple_oauth/index.html
+++ b/knowledge_base/tips/multiple_oauth/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How can I configure Velociraptor for multiple SSO providers :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/multiple_oauth/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/multiple_oauth/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -97,4 +97,4 @@
 </code></pre><p>Note that you can have multiple <code>OIDC</code> authenticators and each can have a separate name and an icon associated with it (e.g. if multiple organizations use separate Okta logins).</p><p><figure><img src=https://user-images.githubusercontent.com/3856546/160241517-c2bf85e5-7d5d-4d3b-ac24-b2bfbda5436b.png alt="Logging in with multiple providers" class=captioned><figcaption>Logging in with multiple providers</figcaption></figure></p><h2 id=granting-a-user-a-role>Granting a user a role.</h2><p>Velociraptor will trust any of the configured authenticators, to identify the user and based on the username, grant the user the appropriate roles on the Velociraptor server. You will need to grant the user a role either through the command line:</p><pre><code>velociraptor user add --role administrator mike@gmail.comm
 </code></pre><p>Or via a notebook cell:</p><pre><code class=language-sql>SELECT user_create(user=&quot;mike@gmail.com&quot;, role=&quot;administrator&quot;)
 FROM scope()
-</code></pre><div class="mynotices warning"><div heading=" Trusting multiple providers "><p>Be aware that trusting multiple identity providers can result in account hijack if a user can get an account of the same name on another provider. Velociraptor just uses the account name provided by the OAuth provider to grant access and does not keep track of which provider actually identified the user.</p><p>In simple terms, if a user has username &ldquo;mike&rdquo; on <code>OIDC</code> provider 1 and another user can get say a Github account for the user &ldquo;mike&rdquo;, then the second user can impersonate the first user by logging in with the second provider.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><div class="mynotices warning"><div heading=" Trusting multiple providers "><p>Be aware that trusting multiple identity providers can result in account hijack if a user can get an account of the same name on another provider. Velociraptor just uses the account name provided by the OAuth provider to grant access and does not keep track of which provider actually identified the user.</p><p>In simple terms, if a user has username &ldquo;mike&rdquo; on <code>OIDC</code> provider 1 and another user can get say a Github account for the user &ldquo;mike&rdquo;, then the second user can impersonate the first user by logging in with the second provider.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/notebook_timeout/index.html b/knowledge_base/tips/notebook_timeout/index.html
index 1eaacc85cea..748ac64e0f1 100644
--- a/knowledge_base/tips/notebook_timeout/index.html
+++ b/knowledge_base/tips/notebook_timeout/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How to increase notebook timeout :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/notebook_timeout/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/notebook_timeout/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -74,4 +74,4 @@
 ... other settings ...
 defaults:
     notebook_cell_timeout_min: 20
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/plugin_not_found/index.html b/knowledge_base/tips/plugin_not_found/index.html
index a85e0f6db2e..a582ed5010d 100644
--- a/knowledge_base/tips/plugin_not_found/index.html
+++ b/knowledge_base/tips/plugin_not_found/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>What to do about error "Plugin info not found" :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/plugin_not_found/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/plugin_not_found/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -93,4 +93,4 @@
 allow list:</p><pre><code>ERROR:Plugin info not found.
 </code></pre><p>If you decide you need this particular plugin you can either add to
 the allow list in the server configuration file. Or you may remove the
-allow list entirely (which allows all plugins to be registered).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+allow list entirely (which allows all plugins to be registered).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/proxy/index.html b/knowledge_base/tips/proxy/index.html
index fa04d020ce6..fd53159790d 100644
--- a/knowledge_base/tips/proxy/index.html
+++ b/knowledge_base/tips/proxy/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How do I set a proxy for client communications? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/proxy/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/proxy/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -92,4 +92,4 @@
   proxy: http://proxy.example.com:3128/
   server_urls:
   - https://velo.example.com:8100/
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/quarantine/index.html b/knowledge_base/tips/quarantine/index.html
index 283c4afc442..7f3702c291a 100644
--- a/knowledge_base/tips/quarantine/index.html
+++ b/knowledge_base/tips/quarantine/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Custom quarantine exclusions :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/quarantine/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/quarantine/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -75,4 +75,4 @@
 SrcAddr = me
 DstAddr = IP to exclude
 Mirrored = yes for bidirectional communication
-Description</li></ol><p><figure><img src=https://user-images.githubusercontent.com/13081800/222630435-4882554a-eefa-4a78-9ae2-fe41d3d60874.png alt=image class=captioned><figcaption>image</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+Description</li></ol><p><figure><img src=https://user-images.githubusercontent.com/13081800/222630435-4882554a-eefa-4a78-9ae2-fe41d3d60874.png alt=image class=captioned><figcaption>image</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/random/index.html b/knowledge_base/tips/random/index.html
index a0085190f92..b602ffdb42a 100644
--- a/knowledge_base/tips/random/index.html
+++ b/knowledge_base/tips/random/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How do you generate random characters? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/random/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/random/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -76,4 +76,4 @@
   LIMIT 32
 
 SELECT join(array=RandomChars.Character) as Characters FROM scope()
-</code></pre><p>Modify the Character WHERE regex and LIMIT for desired results.</p><p><figure><img src=https://github.com/Velocidex/velociraptor-docs/assets/13081800/15d5e7f3-f519-4446-bbcb-fb42d97f4197 alt=image class=captioned><figcaption>image</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><p>Modify the Character WHERE regex and LIMIT for desired results.</p><p><figure><img src=https://github.com/Velocidex/velociraptor-docs/assets/13081800/15d5e7f3-f519-4446-bbcb-fb42d97f4197 alt=image class=captioned><figcaption>image</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/reconfigure_offline_collector/index.html b/knowledge_base/tips/reconfigure_offline_collector/index.html
index 3b6872580fa..fc5d7771086 100644
--- a/knowledge_base/tips/reconfigure_offline_collector/index.html
+++ b/knowledge_base/tips/reconfigure_offline_collector/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How can I quickly reconfigure an offline collector? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/reconfigure_offline_collector/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/reconfigure_offline_collector/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>How can I quickly reconfigure an offline collector?</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1 id=how-can-i-quickly-reconfigure-an-offline-collector>How can I quickly reconfigure an offline collector?</h1><p>The offline collector is a pre-configured version of Velociraptor that automatically collects certain artifacts when invoked with no command line args. The offline collector is a full Velociraptor binary that simply has a custom configuration embedded - so you can use the collector binary to perform any operations that Velociraptor would.</p><p>Usually the collector is built using the GUI by selecting the correct artifacts and injecting parameters into the embedded configuration file. But sometimes we might want to slightly modify the embedded configuration, and firing up a GUI to rebuild a new collector from scratch is a bit too much work.</p><p>There is actually an easier way to quickly modify the embedded configuration.</p><ol><li>First extract the existing embedded config from the collector into a local file:</li></ol><pre><code>Collector_velociraptor-v0.6.4-windows-amd64.exe config show &gt; config.yaml
 </code></pre><ol start=2><li>Next we can edit the config file - for example, if we need to tweak the parameters</li><li>Finally we repack the new configuration file into the existing collector:</li></ol><pre><code>Collector_velociraptor-v0.6.4-windows-amd64.exe config repack config.yaml new_collector.exe
-</code></pre><p>You can verify the new collector has the modified configuration using <code>new_collector.exe config show</code></p><p>This method is suitable for small changes in the embedded configuration - it is always more reliable to use the GUI to prepare a completely new collector, but for small tweaks this method may be quicker.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><p>You can verify the new collector has the modified configuration using <code>new_collector.exe config show</code></p><p>This method is suitable for small changes in the embedded configuration - it is always more reliable to use the GUI to prepare a completely new collector, but for small tweaks this method may be quicker.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/registry_finder/index.html b/knowledge_base/tips/registry_finder/index.html
index 932ac705331..074f30d7c87 100644
--- a/knowledge_base/tips/registry_finder/index.html
+++ b/knowledge_base/tips/registry_finder/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How do I search for registry keys :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/registry_finder/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/registry_finder/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>How do I search for registry keys</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags><div class=tags><a class=tag-link href=/tags/forensics>forensics</a>
-<a class=tag-link href=/tags/searching>searching</a></div></div><div id=body-inner><h1 id=how-do-i-search-for-registry-keys>How do I search for registry keys</h1><p>To search the registry simply use the &ldquo;registry&rdquo; accessor with the <code>Windows.Search.FileFinder</code> artifact.</p><p>This works because Velociraptor can glob the registry as if it were a filesystem (See <a href=/docs/forensic/filesystem/#filesystem-accessors>Filesystem Accessors</a></p><p><figure><img src=https://user-images.githubusercontent.com/3856546/165133750-a694844a-5bb5-44bc-94a8-fd715a6efe4a.png alt="Searching the registry" class=captioned><figcaption>Searching the registry</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<a class=tag-link href=/tags/searching>searching</a></div></div><div id=body-inner><h1 id=how-do-i-search-for-registry-keys>How do I search for registry keys</h1><p>To search the registry simply use the &ldquo;registry&rdquo; accessor with the <code>Windows.Search.FileFinder</code> artifact.</p><p>This works because Velociraptor can glob the registry as if it were a filesystem (See <a href=/docs/forensic/filesystem/#filesystem-accessors>Filesystem Accessors</a></p><p><figure><img src=https://user-images.githubusercontent.com/3856546/165133750-a694844a-5bb5-44bc-94a8-fd715a6efe4a.png alt="Searching the registry" class=captioned><figcaption>Searching the registry</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/retry_hunt/index.html b/knowledge_base/tips/retry_hunt/index.html
index 4b7500cd687..e60d9c51611 100644
--- a/knowledge_base/tips/retry_hunt/index.html
+++ b/knowledge_base/tips/retry_hunt/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How do I re-collect a failed artifact in a hunt? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/retry_hunt/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/retry_hunt/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -116,4 +116,4 @@
 </code></pre><ol><li><p>The <code>NewCollections</code> query gets all Flows in the <code>ERROR</code> state
 within a hunt and schedules a new collection using the same
 artifacts but increasing the maximum upload size to 1gb and timeout
-to 600 seconds.</p></li><li><p>The next query adds the new collection to the hunt.</p></li></ol><p>Note this query will only work after <a href=https://github.com/Velocidex/velociraptor/commit/768021225bd617bb279fe424dcdf29c6d7d467b4>#2067</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+to 600 seconds.</p></li><li><p>The next query adds the new collection to the hunt.</p></li></ol><p>Note this query will only work after <a href=https://github.com/Velocidex/velociraptor/commit/768021225bd617bb279fe424dcdf29c6d7d467b4>#2067</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/rolling_certificates/index.html b/knowledge_base/tips/rolling_certificates/index.html
index 0b7e3136e27..392574e123b 100644
--- a/knowledge_base/tips/rolling_certificates/index.html
+++ b/knowledge_base/tips/rolling_certificates/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How to fix "certificate has expired or not yet valid error"? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/rolling_certificates/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/rolling_certificates/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -90,4 +90,4 @@
    Not Before: Apr 25 21:01:51 2022 GMT
    Not After : Apr 25 21:01:51 2023 GMT
 </code></pre><p>Now back up the old configuration file and replace it with the new
-file, then restart the server. Clients should reconnect automatically.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+file, then restart the server. Clients should reconnect automatically.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/ssl/index.html b/knowledge_base/tips/ssl/index.html
index 92ca68e348d..5af9108a89d 100644
--- a/knowledge_base/tips/ssl/index.html
+++ b/knowledge_base/tips/ssl/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How do I use my own SSL certificates? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/ssl/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/ssl/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -87,4 +87,4 @@
           XXXXX
           -----END CERTIFICATE-----
           ...
-</code></pre><h3 id=test>Test</h3><p>Launching the server we should be able to connect to the GUI using our new certificate. Note this must be trusted by browser/system to prevent errors.</p><p>Launching the client, it should connect securely without error, using the trusted CA chain and the new server certificate.</p><p>No changes need to be made to the pinned certificate name, nor do any certificates need to be modified in the configuration files.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><h3 id=test>Test</h3><p>Launching the server we should be able to connect to the GUI using our new certificate. Note this must be trusted by browser/system to prevent errors.</p><p>Launching the client, it should connect securely without error, using the trusted CA chain and the new server certificate.</p><p>No changes need to be made to the pinned certificate name, nor do any certificates need to be modified in the configuration files.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/startup_artifacts/index.html b/knowledge_base/tips/startup_artifacts/index.html
index 2a8ee8cfc90..23f8e1fea91 100644
--- a/knowledge_base/tips/startup_artifacts/index.html
+++ b/knowledge_base/tips/startup_artifacts/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>What is the easiest way to have Velociraptor start with a custom server artifact automatically loaded? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/startup_artifacts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/startup_artifacts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -106,4 +106,4 @@
 appear in the usual <code>Server Artifacts</code> screen.</p></li></ul><div class="mynotices note"><div heading=note><p>Currently it is not possible to specify parameters for initial
 artifacts so if you need to tweak the parameters it is best to create
 a custom artifact that in turn launches the needed artifacts with the
-correct parameters.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+correct parameters.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/upgrading/index.html b/knowledge_base/tips/upgrading/index.html
index 261cd548589..0764789d9ac 100644
--- a/knowledge_base/tips/upgrading/index.html
+++ b/knowledge_base/tips/upgrading/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How do I upgrade my server and clients? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/upgrading/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/upgrading/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>How do I upgrade my server and clients?</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#supported-upgrade-scenarios>Supported Upgrade Scenarios</a></li><li><a href=#other-tips>Other tips</a></li></ul></nav></div></div></div></div><div id=head-tags><div class=tags><a class=tag-link href=/tags/configuration>configuration</a>
 <a class=tag-link href=/tags/admin>admin</a></div></div><div id=body-inner><h1 id=how-do-i-upgrade-my-server-and-clients>How do I upgrade my server and clients?</h1><p>To upgrade the Velociraptor server to a new version, simply download the latest release binary from the GitHub Release Page and regenerate a new <code>Debian</code> package as described above, but using the existing configuration file.</p><p>See <a href=/docs/deployment/cloud/#server-upgrades>this page for more details</a></p><p>To upgrade the Velociraptor clients, you will need to push out new MSIs using the existing client configuration files.</p><p>More details on <a href=/docs/deployment/clients/#client-upgrades>Client upgrades</a></p><h2 id=supported-upgrade-scenarios>Supported Upgrade Scenarios</h2><p>Matching client and server versions is the most supported configuration.
-See <a href=/docs/overview/support/#client-and-server-versioning>the support policy</a></p><p>Before upgrading perform testing of the combination of client and server versions to be used, compatibility of mixed versions is best efforts based on community testing and issues being reported.</p><ul><li>Check <a href=https://github.com/Velocidex/velociraptor/issues>GitHub</a> for issues reported by the community.</li><li>Read <a href=https://github.com/Velocidex/velociraptor/releases>release notes</a> for all versions between the current version, and the version you are moving to if skipping versions. Generally though avoid skipping versions.</li></ul><h2 id=other-tips>Other tips</h2><ul><li>Recent versions of clients and servers generally can communicate with each other without a problem, but new functionality may not be available on old clients. Artifacts like <a href=https://github.com/Velocidex/velociraptor/issues/1566>this</a> will (0.6.4+) help reduce this.</li><li>Upgrading the server before clients is more common, so version problems are more likely to have been caught in community testing with this approach.</li><li>Consider running a parallel deployment as the most compatible way to upgrade. Such as when upgrading and there are known breaking changes between the current client and target server versions (going from self signed to auto cert), or when there are large version differences (unusual combinations of client and server).</li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+See <a href=/docs/overview/support/#client-and-server-versioning>the support policy</a></p><p>Before upgrading perform testing of the combination of client and server versions to be used, compatibility of mixed versions is best efforts based on community testing and issues being reported.</p><ul><li>Check <a href=https://github.com/Velocidex/velociraptor/issues>GitHub</a> for issues reported by the community.</li><li>Read <a href=https://github.com/Velocidex/velociraptor/releases>release notes</a> for all versions between the current version, and the version you are moving to if skipping versions. Generally though avoid skipping versions.</li></ul><h2 id=other-tips>Other tips</h2><ul><li>Recent versions of clients and servers generally can communicate with each other without a problem, but new functionality may not be available on old clients. Artifacts like <a href=https://github.com/Velocidex/velociraptor/issues/1566>this</a> will (0.6.4+) help reduce this.</li><li>Upgrading the server before clients is more common, so version problems are more likely to have been caught in community testing with this approach.</li><li>Consider running a parallel deployment as the most compatible way to upgrade. Such as when upgrading and there are known breaking changes between the current client and target server versions (going from self signed to auto cert), or when there are large version differences (unusual combinations of client and server).</li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/knowledge_base/tips/urldecode/index.html b/knowledge_base/tips/urldecode/index.html
index fac8cf52ca8..29c1a2ec1d0 100644
--- a/knowledge_base/tips/urldecode/index.html
+++ b/knowledge_base/tips/urldecode/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>How can I url/percent decode a string? :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/urldecode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/knowledge_base/tips/urldecode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -83,4 +83,4 @@
     url(path=Line).String[1:] as URLFunction,
     regex_replace(source=Line,replace_lambda=&quot;x=&gt;format(format='%%%02x',args=x)&quot;, re=&quot;[^a-z0-9\\-_.~:/?]&quot;) as ManualMethod
 FROM scope()
-</code></pre><p><figure><img src=https://user-images.githubusercontent.com/13081800/187116187-9347d6be-5566-49b0-98d6-65ce0d2ff0cc.png alt="Url Encode: results" class=captioned><figcaption>Url Encode: results</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><p><figure><img src=https://user-images.githubusercontent.com/13081800/187116187-9347d6be-5566-49b0-98d6-65ce0d2ff0cc.png alt="Url Encode: results" class=captioned><figcaption>Url Encode: results</figcaption></figure></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/presentations/2021_auscert/index.html b/presentations/2021_auscert/index.html
index 020405f03b0..a38ba23d68f 100644
--- a/presentations/2021_auscert/index.html
+++ b/presentations/2021_auscert/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Auscert Workshop 2021 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2021_auscert/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2021_auscert/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Auscert Workshop 2021</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#slides>Slides</a></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Auscert Workshop 2021</h1><p>This talk was given at the Annual Auscert conference as a long form (4h) workshop
-<a href=https://2021.conference.auscert.org.au/index.html>https://2021.conference.auscert.org.au/index.html</a></p><h2 id=slides>Slides</h2><iframe src="https://docs.google.com/presentation/d/e/2PACX-1vTrR6J-o3TTcNEjHSstzJG1_mc3Fltv-OP00x-0_KRoOS4ZJltPBkF22ESPaTpYozMNVwk4WMp4yG0b/embed?start=false&loop=false&delayms=3000" frameborder=0 width=960 height=569 allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<a href=https://2021.conference.auscert.org.au/index.html>https://2021.conference.auscert.org.au/index.html</a></p><h2 id=slides>Slides</h2><iframe src="https://docs.google.com/presentation/d/e/2PACX-1vTrR6J-o3TTcNEjHSstzJG1_mc3Fltv-OP00x-0_KRoOS4ZJltPBkF22ESPaTpYozMNVwk4WMp4yG0b/embed?start=false&loop=false&delayms=3000" frameborder=0 width=960 height=569 allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/presentations/2021_blueteam_village/index.html b/presentations/2021_blueteam_village/index.html
index f90b8c61fd6..c3dade06c14 100644
--- a/presentations/2021_blueteam_village/index.html
+++ b/presentations/2021_blueteam_village/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Blue Team Village 2021 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2021_blueteam_village/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2021_blueteam_village/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=top-github-link><a class=github-link title='Edit this page' href=https://github.com/Velocidex/velociraptor-docs/edit/master/content/presentations/2021_blueteam_village/_index.md target=blank><i class="fas fa-code-branch"></i>
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>Blue Team Village 2021</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#video>Video</a></li><li><a href=#slides>Slides</a></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Blue Team Village 2021</h1><p>This talk was given at the Blue Team Village at DefCon 2021</p><h2 id=video>Video</h2><iframe width=560 height=315 src=https://www.youtube.com/embed/TBWisjyP3zY title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><h2 id=slides>Slides</h2><iframe src="https://docs.google.com/presentation/d/e/2PACX-1vRm701pui2YnVOMl-9lcB-aNVHH9aKGCK7vGL46v05OjYFKvWHZO2fqEY3j5luqtxvr_kGXbyF2tQC4/embed?start=false&loop=false&delayms=3000" frameborder=0 width=960 height=569 allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe>><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>Blue Team Village 2021</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#video>Video</a></li><li><a href=#slides>Slides</a></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Blue Team Village 2021</h1><p>This talk was given at the Blue Team Village at DefCon 2021</p><h2 id=video>Video</h2><iframe width=560 height=315 src=https://www.youtube.com/embed/TBWisjyP3zY title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><h2 id=slides>Slides</h2><iframe src="https://docs.google.com/presentation/d/e/2PACX-1vRm701pui2YnVOMl-9lcB-aNVHH9aKGCK7vGL46v05OjYFKvWHZO2fqEY3j5luqtxvr_kGXbyF2tQC4/embed?start=false&loop=false&delayms=3000" frameborder=0 width=960 height=569 allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe>><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/presentations/2021_dfrws_us/index.html b/presentations/2021_dfrws_us/index.html
index 6fe93f3e128..a5055572e4b 100644
--- a/presentations/2021_dfrws_us/index.html
+++ b/presentations/2021_dfrws_us/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>DFRWS US 2021 Workshop :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2021_dfrws_us/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2021_dfrws_us/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -73,4 +73,4 @@
 remotely so you can attend from the comfort of you preferred place.</p><h2 id=requirements>Requirements</h2><p>To follow along, all you will need is a Windows system or Virtual
 Machine (for example Windows 10, or Windows server edition) with
 administrator level access. You can obtain a suitable VM from your
-favorite cloud provider or run the VM locally.</p><h2 id=video>Video</h2><iframe width=560 height=315 src=https://www.youtube.com/embed/PiYPLEjYXnw title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><h2 id=slides>Slides</h2><iframe src="https://docs.google.com/presentation/d/e/2PACX-1vQPVQPr3TvDJGBTxdFJqG_ZXeNs6pvrBDqNn46levEkJ6HGbVA9Ay33RaTzpXiyaqnQq1Zim3Lh2msf/embed?start=false&loop=false&delayms=3000" frameborder=0 width=960 height=569 allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+favorite cloud provider or run the VM locally.</p><h2 id=video>Video</h2><iframe width=560 height=315 src=https://www.youtube.com/embed/PiYPLEjYXnw title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><h2 id=slides>Slides</h2><iframe src="https://docs.google.com/presentation/d/e/2PACX-1vQPVQPr3TvDJGBTxdFJqG_ZXeNs6pvrBDqNn46levEkJ6HGbVA9Ay33RaTzpXiyaqnQq1Zim3Lh2msf/embed?start=false&loop=false&delayms=3000" frameborder=0 width=960 height=569 allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/presentations/2021_osdfc/index.html b/presentations/2021_osdfc/index.html
index 625c3f9ea48..27ee42fdea2 100644
--- a/presentations/2021_osdfc/index.html
+++ b/presentations/2021_osdfc/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Open Source Digital Forensic Conference 2021 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2021_osdfc/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2021_osdfc/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=top-github-link><a class=github-link title='Edit this page' href=https://github.com/Velocidex/velociraptor-docs/edit/master/content/presentations/2021_osdfc/_index.md target=blank><i class="fas fa-code-branch"></i>
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>Open Source Digital Forensic Conference 2021</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#video>Video</a></li><li><a href=#slides>Slides</a></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Open Source Digital Forensic Conference 2021</h1><p>This talk was given at the Open Source Digital Forensic conference 2021 <a href=https://www.osdfcon.org/events_2021/velociraptor/>https://www.osdfcon.org/events_2021/velociraptor/</a></p><h2 id=video>Video</h2><iframe width=560 height=315 src=https://www.youtube.com/embed/8AQFNAICajE title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><h2 id=slides>Slides</h2><iframe src="https://docs.google.com/presentation/d/e/2PACX-1vSiSWr-TVMn40D71vndoFJxV_SlL88tsBkO5uxj9VIbr3z0X5-pOs4Q-k9Y4jxusD7ja7aT-SnK5FZr/embed?start=false&loop=false&delayms=3000" frameborder=0 width=1280 height=749 allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>Open Source Digital Forensic Conference 2021</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#video>Video</a></li><li><a href=#slides>Slides</a></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Open Source Digital Forensic Conference 2021</h1><p>This talk was given at the Open Source Digital Forensic conference 2021 <a href=https://www.osdfcon.org/events_2021/velociraptor/>https://www.osdfcon.org/events_2021/velociraptor/</a></p><h2 id=video>Video</h2><iframe width=560 height=315 src=https://www.youtube.com/embed/8AQFNAICajE title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><h2 id=slides>Slides</h2><iframe src="https://docs.google.com/presentation/d/e/2PACX-1vSiSWr-TVMn40D71vndoFJxV_SlL88tsBkO5uxj9VIbr3z0X5-pOs4Q-k9Y4jxusD7ja7aT-SnK5FZr/embed?start=false&loop=false&delayms=3000" frameborder=0 width=1280 height=749 allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/presentations/2022_auscert/index.html b/presentations/2022_auscert/index.html
index d954c172eb1..8b5c4257eeb 100644
--- a/presentations/2022_auscert/index.html
+++ b/presentations/2022_auscert/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Auscert Workshop 2022 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2022_auscert/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2022_auscert/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -115,4 +115,4 @@
 your own windows VM. All you need to participate is a Windows VM
 (e.g. a cloud instance or local VM).</p><p>Participants will learn:</p><ol><li>How to install Velociraptor locally</li><li>The basics of the Velociraptor Query Language (VQL)</li><li>How to apply community queries from the Artifact Exchange</li><li>Hunting large number of machines for compromise in minutes</li><li>Create offline collectors for responding to networks without
 installing the Velociraptor agent</li></ol><p>This talk was given at the Annual Auscert conference as a long form (4h) workshop
-<a href=https://conference.auscert.org.au/program/>https://conference.auscert.org.au/program/</a></p><iframe src="https://docs.google.com/presentation/d/e/2PACX-1vTKbAGMDDAhgTn33FbTXPGY8gYlL1ueCoIn-gERwbxXyRdyadKOcg9ho1Y-RGUmi4MbbwVe1g5Xszr2/embed?start=false&loop=false&delayms=3000" frameborder=0 width=1280 height=749 allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<a href=https://conference.auscert.org.au/program/>https://conference.auscert.org.au/program/</a></p><iframe src="https://docs.google.com/presentation/d/e/2PACX-1vTKbAGMDDAhgTn33FbTXPGY8gYlL1ueCoIn-gERwbxXyRdyadKOcg9ho1Y-RGUmi4MbbwVe1g5Xszr2/embed?start=false&loop=false&delayms=3000" frameborder=0 width=1280 height=749 allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/presentations/2022_dfrws_apac/index.html b/presentations/2022_dfrws_apac/index.html
index 47cbab3a684..971f01c2a55 100644
--- a/presentations/2022_dfrws_apac/index.html
+++ b/presentations/2022_dfrws_apac/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>DFRWS APAC 2022 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2022_dfrws_apac/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2022_dfrws_apac/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -90,4 +90,4 @@
 (e.g. a cloud instance or local VM).</p><p>Participants will learn</p><ol><li>How to install Velociraptor locally</li><li>The basics of the Velociraptor Query Language (VQL)</li><li>How to apply community queries from the Artifact Exchange</li><li>Hunting large number of machines for compromise in minutes</li><li>Use Velociraptor artifacts on hard disk images.</li></ol><p>Participants will need their own windows VM or cloud machine (with
 admin level access) and will download Velociraptor from Github to
 install it on that machine.</p><p>There will also be a small disk image to play with which should not
-take too long to download.</p><p><a href=https://dfrws.org/presentation/velociraptor/>https://dfrws.org/presentation/velociraptor/</a></p><iframe width=980px height=600px src=https://present.velocidex.com/presentations/dfrws_apac_2022/ frameborder=0></iframe><p><a href=https://present.velocidex.com/presentations/dfrws_apac_2022/>Full Screen</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+take too long to download.</p><p><a href=https://dfrws.org/presentation/velociraptor/>https://dfrws.org/presentation/velociraptor/</a></p><iframe width=980px height=600px src=https://present.velocidex.com/presentations/dfrws_apac_2022/ frameborder=0></iframe><p><a href=https://present.velocidex.com/presentations/dfrws_apac_2022/>Full Screen</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/presentations/2022_dfrws_us/index.html b/presentations/2022_dfrws_us/index.html
index a6ce5e0b74b..5a852cacd62 100644
--- a/presentations/2022_dfrws_us/index.html
+++ b/presentations/2022_dfrws_us/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>DFRWS US 2022 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2022_dfrws_us/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2022_dfrws_us/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -90,4 +90,4 @@
 (e.g. a cloud instance or local VM).</p><p>Participants will learn</p><ol><li>How to install Velociraptor locally</li><li>The basics of the Velociraptor Query Language (VQL)</li><li>How to apply community queries from the Artifact Exchange</li><li>Hunting large number of machines for compromise in minutes</li><li>Use Velociraptor artifacts on hard disk images.</li></ol><p>Participants will need their own windows VM or cloud machine (with
 admin level access) and will download Velociraptor from Github to
 install it on that machine.</p><p>There will also be a small disk image to play with which should not
-take too long to download.</p><p><a href=https://dfrws.org/presentation/velociraptor-digging-deeper/>https://dfrws.org/presentation/velociraptor-digging-deeper/</a></p><iframe src="https://docs.google.com/presentation/d/e/2PACX-1vSmPYSSS7WiOcscMYtryFl4gVUCdT2VgvY_BtTmTkV9xyFAO87jbrFm85jcNXpxj7cVXEst2v6cGoYR/embed?start=false&loop=false&delayms=3000" frameborder=0 width=1280 height=749 allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+take too long to download.</p><p><a href=https://dfrws.org/presentation/velociraptor-digging-deeper/>https://dfrws.org/presentation/velociraptor-digging-deeper/</a></p><iframe src="https://docs.google.com/presentation/d/e/2PACX-1vSmPYSSS7WiOcscMYtryFl4gVUCdT2VgvY_BtTmTkV9xyFAO87jbrFm85jcNXpxj7cVXEst2v6cGoYR/embed?start=false&loop=false&delayms=3000" frameborder=0 width=1280 height=749 allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/presentations/2022_linuxconf_au/index.html b/presentations/2022_linuxconf_au/index.html
index ae71b6b9ca0..286a8eeaaba 100644
--- a/presentations/2022_linuxconf_au/index.html
+++ b/presentations/2022_linuxconf_au/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux Conf Au 2022 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2022_linuxconf_au/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2022_linuxconf_au/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -85,4 +85,4 @@
 detection via process parent/child analysis) and how VQL can be used
 to build sophisticated alerting around process execution chains,
 network connections and even bash instrumentation of the command line,
-all done at scale with the click of a few buttons.</p><h2 id=video>Video</h2><iframe width=560 height=315 src=https://www.youtube.com/embed/0Cs4rj-_FD4 title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><h2 id=slides>Slides</h2><iframe src="https://docs.google.com/presentation/d/e/2PACX-1vS_EFYmZwPF_UCJANczTU7ATNhqPiV9SiN3pLx5hpZIW8HmzgleOhN0Kzq8EKWZGBIGD5E09EoVoIM3/embed?start=false&loop=false&delayms=3000" frameborder=0 width=1280 height=749 allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+all done at scale with the click of a few buttons.</p><h2 id=video>Video</h2><iframe width=560 height=315 src=https://www.youtube.com/embed/0Cs4rj-_FD4 title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><h2 id=slides>Slides</h2><iframe src="https://docs.google.com/presentation/d/e/2PACX-1vS_EFYmZwPF_UCJANczTU7ATNhqPiV9SiN3pLx5hpZIW8HmzgleOhN0Kzq8EKWZGBIGD5E09EoVoIM3/embed?start=false&loop=false&delayms=3000" frameborder=0 width=1280 height=749 allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/presentations/2022_sans_summit/index.html b/presentations/2022_sans_summit/index.html
index 97c61bb2dcb..dd8667734c7 100644
--- a/presentations/2022_sans_summit/index.html
+++ b/presentations/2022_sans_summit/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>SANS Threat Hunting Summit 2022 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2022_sans_summit/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2022_sans_summit/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -81,4 +81,4 @@
 hunt for compromise and automate all our response needs. We will cover
 common use cases such as hunting for ssh keys across large networks.</p><p>We will also discuss the advantages and disadvantages of the
 Velociraptor philosophy: Push processing to the endpoint rather than
-transfer raw data for local processing.</p><iframe src=https://present.velocidex.com/presentations/sans_2022/index.html frameborder=0 width=980px height=600px allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><p><a href=https://present.velocidex.com/presentations/sans_2022/index.html>Full Screen</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+transfer raw data for local processing.</p><iframe src=https://present.velocidex.com/presentations/sans_2022/index.html frameborder=0 width=980px height=600px allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><p><a href=https://present.velocidex.com/presentations/sans_2022/index.html>Full Screen</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/presentations/2022_tech_user_group_cbr/index.html b/presentations/2022_tech_user_group_cbr/index.html
index 92acfec889c..90583221250 100644
--- a/presentations/2022_tech_user_group_cbr/index.html
+++ b/presentations/2022_tech_user_group_cbr/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Tech Users Group 2022 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2022_tech_user_group_cbr/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2022_tech_user_group_cbr/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -83,4 +83,4 @@
 and demo session followed by some networking drinks and nibbles. This
 workshop is an introduction to hunting and incident response with
 Velociraptor for information security professionals.</p><p>Register now to confirm your place. Spaces are limited, so please
-register early.</p><p>We look forward to seeing you there!</p><iframe src="https://docs.google.com/presentation/d/e/2PACX-1vR3B1jzUXQWKTOxojzarFybSFwedHxpJrrCGJ_Wrvnuj_qsTlpKWkAh01RTuXy1htT5FkG4XcCXOSjn/embed?start=false&loop=false&delayms=3000" frameborder=0 width=1280 height=749 allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+register early.</p><p>We look forward to seeing you there!</p><iframe src="https://docs.google.com/presentation/d/e/2PACX-1vR3B1jzUXQWKTOxojzarFybSFwedHxpJrrCGJ_Wrvnuj_qsTlpKWkAh01RTuXy1htT5FkG4XcCXOSjn/embed?start=false&loop=false&delayms=3000" frameborder=0 width=1280 height=749 allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/presentations/2022_velocon/index.html b/presentations/2022_velocon/index.html
index 3adf4007371..2b375f1c63a 100644
--- a/presentations/2022_velocon/index.html
+++ b/presentations/2022_velocon/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Velocon 2022 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2022_velocon/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2022_velocon/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -210,4 +210,4 @@
 and gauge the effectiveness of our detections.</p><p>Attendees will walk away from this presentation with several examples
 of how they immediately leverage Atomic Red Team tests and catch
 execution of those tests through Velociraptor to evaluate their
-detection capability and improve the security of their enterprise.</p><iframe width=560 height=315 src=https://www.youtube.com/embed/9HmYNDTIsJ0 title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><p><a href="https://drive.google.com/file/d/1nRqqodiAn1-eGw5RWOIHaI6FxS3EROwb/view?usp=sharing">Slides</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+detection capability and improve the security of their enterprise.</p><iframe width=560 height=315 src=https://www.youtube.com/embed/9HmYNDTIsJ0 title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><p><a href="https://drive.google.com/file/d/1nRqqodiAn1-eGw5RWOIHaI6FxS3EROwb/view?usp=sharing">Slides</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/presentations/2023_auscert/index.html b/presentations/2023_auscert/index.html
index a2d57c3b415..e0d3d85efa6 100644
--- a/presentations/2023_auscert/index.html
+++ b/presentations/2023_auscert/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Auscert Workshop 2023 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2023_auscert/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2023_auscert/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -89,4 +89,4 @@
 detection via process parent/child analysis) and how VQL can be used
 to build sophisticated alerting around process execution chains,
 network connections and even bash instrumentation of the command line,
-all done at scale with the click of a few buttons.</p><iframe src=https://present.velocidex.com/presentations/2023-auscert/index.html frameborder=0 width=980px height=600px allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><p><a href=https://present.velocidex.com/presentations/2023-auscert/index.html>Full Screen</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+all done at scale with the click of a few buttons.</p><iframe src=https://present.velocidex.com/presentations/2023-auscert/index.html frameborder=0 width=980px height=600px allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><p><a href=https://present.velocidex.com/presentations/2023-auscert/index.html>Full Screen</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/presentations/2023_everything_open/index.html b/presentations/2023_everything_open/index.html
index afa4b5c1de5..3767892f276 100644
--- a/presentations/2023_everything_open/index.html
+++ b/presentations/2023_everything_open/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Everything Open Conference 2023 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2023_everything_open/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2023_everything_open/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -89,4 +89,4 @@
 detection via process parent/child analysis) and how VQL can be used
 to build sophisticated alerting around process execution chains,
 network connections and even bash instrumentation of the command line,
-all done at scale with the click of a few buttons.</p><iframe src=https://present.velocidex.com/presentations/everything_open_2023/index.html frameborder=0 width=980px height=600px allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><p><a href=https://present.velocidex.com/presentations/everything_open_2023/index.html>Full Screen</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+all done at scale with the click of a few buttons.</p><iframe src=https://present.velocidex.com/presentations/everything_open_2023/index.html frameborder=0 width=980px height=600px allowfullscreen mozallowfullscreen=true webkitallowfullscreen=true></iframe><p><a href=https://present.velocidex.com/presentations/everything_open_2023/index.html>Full Screen</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/presentations/2023_velocon/index.html b/presentations/2023_velocon/index.html
index 1eb011f0556..3c8a04eb3ee 100644
--- a/presentations/2023_velocon/index.html
+++ b/presentations/2023_velocon/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>VeloCON 2023 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2023_velocon/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/2023_velocon/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -261,4 +261,4 @@
 OS (including Remote Access Tools artifacts), which can be utilized to
 identify the affected systems and Threat Actor’s movement in a
 network. The ability to efficiently consume the data generated by our
-Velociraptor plugin through data visualizations.</p><iframe width=1092 height=614 src=https://www.youtube.com/embed/WS6yzwcZ9ZE title="VeloCon 2023: Tracing the Footsteps: A Bird’s Eye View of Lateral Movement Using Velociraptor" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen></iframe><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+Velociraptor plugin through data visualizations.</p><iframe width=1092 height=614 src=https://www.youtube.com/embed/WS6yzwcZ9ZE title="VeloCon 2023: Tracing the Footsteps: A Bird’s Eye View of Lateral Movement Using Velociraptor" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen></iframe><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/presentations/index.html b/presentations/index.html
index 5282d625415..d9f4889d219 100644
--- a/presentations/index.html
+++ b/presentations/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Presentations :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/presentations/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Presentations</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Presentations</h1><p>The following are various presentations and events that featured
-Velociraptor in some way.</p><p>You can see these presentations and more on our <a href=https://present.velocidex.com/>presentations site</a></p><ul class="children children-li"><li><a href=/presentations/2021_auscert/>Auscert Workshop 2021</a></li><li><a href=/presentations/2021_dfrws_us/>DFRWS US 2021 Workshop</a></li><li><a href=/presentations/2021_osdfc/>Open Source Digital Forensic Conference 2021</a></li><li><a href=/presentations/2021_blueteam_village/>Blue Team Village 2021</a></li><li><a href=/presentations/2022_linuxconf_au/>Linux Conf Au 2022</a></li><li><a href=/presentations/2022_auscert/>Auscert Workshop 2022</a></li><li><a href=/presentations/2022_dfrws_us/>DFRWS US 2022</a></li><li><a href=/presentations/2022_tech_user_group_cbr/>Tech Users Group 2022</a></li><li><a href=/presentations/2022_sans_summit/>SANS Threat Hunting Summit 2022</a></li><li><a href=/presentations/2022_velocon/>Velocon 2022</a></li><li><a href=/presentations/2022_dfrws_apac/>DFRWS APAC 2022</a></li><li><a href=/presentations/2023_everything_open/>Everything Open Conference 2023</a></li><li><a href=/presentations/2023_auscert/>Auscert Workshop 2023</a></li><li><a href=/presentations/2023_velocon/>VeloCON 2023</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+Velociraptor in some way.</p><p>You can see these presentations and more on our <a href=https://present.velocidex.com/>presentations site</a></p><ul class="children children-li"><li><a href=/presentations/2021_auscert/>Auscert Workshop 2021</a></li><li><a href=/presentations/2021_dfrws_us/>DFRWS US 2021 Workshop</a></li><li><a href=/presentations/2021_osdfc/>Open Source Digital Forensic Conference 2021</a></li><li><a href=/presentations/2021_blueteam_village/>Blue Team Village 2021</a></li><li><a href=/presentations/2022_linuxconf_au/>Linux Conf Au 2022</a></li><li><a href=/presentations/2022_auscert/>Auscert Workshop 2022</a></li><li><a href=/presentations/2022_dfrws_us/>DFRWS US 2022</a></li><li><a href=/presentations/2022_tech_user_group_cbr/>Tech Users Group 2022</a></li><li><a href=/presentations/2022_sans_summit/>SANS Threat Hunting Summit 2022</a></li><li><a href=/presentations/2022_velocon/>Velocon 2022</a></li><li><a href=/presentations/2022_dfrws_apac/>DFRWS APAC 2022</a></li><li><a href=/presentations/2023_everything_open/>Everything Open Conference 2023</a></li><li><a href=/presentations/2023_auscert/>Auscert Workshop 2023</a></li><li><a href=/presentations/2023_velocon/>VeloCON 2023</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/rss/index.html b/rss/index.html
index fc5927c1dca..3c4f990e603 100644
--- a/rss/index.html
+++ b/rss/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>RSS Feeds :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/rss/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/rss/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -67,4 +67,4 @@
 <a href=/knowledge_base/><i class="fas fa-brain"></i>Knowledge Base</a></div></li><li data-nav-id=https://docs.velociraptor.app/search/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
-</a></span><span class=links>RSS Feeds</span></div></div></div><div id=head-tags></div><div id=body-inner><h1>RSS Feeds</h1><p>This site has a number of RSS feeds you can follow</p><table><thead><tr><th></th><th></th></tr></thead><tbody><tr><td>Follow new blog entries</td><td><a href=https://docs.velociraptor.app/blog/index.xml>https://docs.velociraptor.app/blog/index.xml</a></td></tr><tr><td>Follow new artifacts in the Artifact Exchange</td><td><a href=https://docs.velociraptor.app/exchange/index.xml>https://docs.velociraptor.app/exchange/index.xml</a></td></tr><tr><td>Follow new Knowledge base Artifact</td><td><a href=https://docs.velociraptor.app/knowledge_base/index.xml>https://docs.velociraptor.app/knowledge_base/index.xml</a></td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</a></span><span class=links>RSS Feeds</span></div></div></div><div id=head-tags></div><div id=body-inner><h1>RSS Feeds</h1><p>This site has a number of RSS feeds you can follow</p><table><thead><tr><th></th><th></th></tr></thead><tbody><tr><td>Follow new blog entries</td><td><a href=https://docs.velociraptor.app/blog/index.xml>https://docs.velociraptor.app/blog/index.xml</a></td></tr><tr><td>Follow new artifacts in the Artifact Exchange</td><td><a href=https://docs.velociraptor.app/exchange/index.xml>https://docs.velociraptor.app/exchange/index.xml</a></td></tr><tr><td>Follow new Knowledge base Artifact</td><td><a href=https://docs.velociraptor.app/knowledge_base/index.xml>https://docs.velociraptor.app/knowledge_base/index.xml</a></td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/search/index.html b/search/index.html
index ad10cfb079b..bc9db10ec33 100644
--- a/search/index.html
+++ b/search/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Search :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/search/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/search/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=top-github-link><a class=github-link title='Edit this page' href=https://github.com/Velocidex/velociraptor-docs/edit/master/content/search/_index.md target=blank><i class="fas fa-code-branch"></i>
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>Search</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Search</h1><script async src="https://cse.google.com/cse.js?cx=ba9e3fd5873e95a74"></script><div class=gcse-search></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>Search</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Search</h1><script async src="https://cse.google.com/cse.js?cx=ba9e3fd5873e95a74"></script><div class=gcse-search></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/sitemap.xml b/sitemap.xml
index a80f1e4607e..0cb4799fa97 100644
--- a/sitemap.xml
+++ b/sitemap.xml
@@ -1 +1 @@
-<?xml version="1.0" encoding="utf-8" standalone="yes"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml"><url><loc>https://docs.velociraptor.app/blog/2023/</loc><lastmod>2023-01-01T06:54:15+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/</loc><lastmod>2022-01-01T06:54:15+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/</loc><lastmod>2021-06-10T06:54:15+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/</loc><lastmod>2021-06-10T07:41:37+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/</loc><lastmod>2021-06-10T06:54:15+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/overview/history/</loc><lastmod>2021-06-09T03:51:18+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/gui/clients/</loc><lastmod>2021-06-09T04:12:07+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/deployment/self-signed/</loc><lastmod>2021-06-09T04:00:52+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/overview/</loc><lastmod>2021-06-09T02:33:37+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/announcements/</loc></url><url><loc>https://docs.velociraptor.app/presentations/2021_auscert/</loc></url><url><loc>https://docs.velociraptor.app/docs/server_automation/server_api/</loc><lastmod>2021-06-30T12:31:08+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/gui/vfs/</loc><lastmod>2021-06-09T04:12:50+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/deployment/</loc><lastmod>2021-06-09T03:52:24+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/08/10/browsing_around_the_filesystem/</loc><lastmod>2018-08-10T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/announcements/2021-artifact-contest/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/</loc></url><url><loc>https://docs.velociraptor.app/docs/deployment/cloud/</loc></url><url><loc>https://docs.velociraptor.app/announcements/2023-cves/</loc></url><url><loc>https://docs.velociraptor.app/presentations/2021_dfrws_us/</loc></url><url><loc>https://docs.velociraptor.app/announcements/2022-velocon/</loc></url><url><loc>https://docs.velociraptor.app/docs/overview/support/</loc></url><url><loc>https://docs.velociraptor.app/docs/gui/artifacts/</loc><lastmod>2021-06-09T04:03:42+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/presentations/2021_osdfc/</loc></url><url><loc>https://docs.velociraptor.app/presentations/2021_blueteam_village/</loc></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-11-09-vql-data-manipulation/</loc><lastmod>2021-11-09T04:54:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-07-12-velociraptor-vs-printnightmare/</loc><lastmod>2021-07-11T18:13:50+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/</loc><lastmod>2021-06-23T08:29:57+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/forensic/filesystem/</loc><lastmod>2021-06-12T23:25:17+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/</loc><lastmod>2021-06-12T07:11:04+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/vql/notebooks/</loc><lastmod>2021-06-11T15:32:04+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/gui/hunting/</loc><lastmod>2021-06-09T04:13:25+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/gui/</loc><lastmod>2021-06-09T04:02:57+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/deployment/clients/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/linux/</loc></url><url><loc>https://docs.velociraptor.app/presentations/2022_linuxconf_au/</loc></url><url><loc>https://docs.velociraptor.app/announcements/2023-trainings/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/</loc></url><url><loc>https://docs.velociraptor.app/docs/deployment/rbac/</loc><lastmod>2021-06-09T03:11:23+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/forensic/searching/</loc><lastmod>2021-06-17T02:30:41+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/vql/artifacts/</loc><lastmod>2021-06-12T05:20:45+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/vql/</loc><lastmod>2021-06-11T05:55:46+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/</loc></url><url><loc>https://docs.velociraptor.app/presentations/2022_auscert/</loc></url><url><loc>https://docs.velociraptor.app/docs/forensic/</loc><lastmod>2021-06-12T21:56:33+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/presentations/2022_dfrws_us/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/</loc></url><url><loc>https://docs.velociraptor.app/docs/offline_triage/remote_uploads/</loc><lastmod>2023-04-02T04:31:24+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/offline_triage/</loc><lastmod>2021-06-27T04:31:24+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/presentations/2022_tech_user_group_cbr/</loc></url><url><loc>https://docs.velociraptor.app/docs/client_monitoring/</loc><lastmod>2021-06-30T12:31:08+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/forensic/ntfs/</loc><lastmod>2021-06-26T20:10:17+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/forensic/binary/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/</loc></url><url><loc>https://docs.velociraptor.app/docs/deployment/resources/</loc></url><url><loc>https://docs.velociraptor.app/docs/extending_vql/</loc><lastmod>2021-06-27T04:29:26+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/server_automation/</loc><lastmod>2021-06-30T12:31:08+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/server_automation/server_monitoring/</loc><lastmod>2021-06-30T12:31:08+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/forensic/evidence_of_execution/</loc><lastmod>2021-06-27T04:12:21+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/vql_reference/</loc><lastmod>2021-06-12T05:12:26+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/vql_reference/experimental/</loc></url><url><loc>https://docs.velociraptor.app/presentations/2022_sans_summit/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/</loc></url><url><loc>https://docs.velociraptor.app/presentations/2022_velocon/</loc></url><url><loc>https://docs.velociraptor.app/docs/forensic/event_logs/</loc><lastmod>2021-06-27T04:34:03+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/vql/events/</loc><lastmod>2021-06-12T20:57:18+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/presentations/2022_dfrws_apac/</loc></url><url><loc>https://docs.velociraptor.app/presentations/2023_everything_open/</loc></url><url><loc>https://docs.velociraptor.app/docs/forensic/volatile/</loc><lastmod>2021-06-27T04:35:23+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/training/</loc><lastmod>2021-06-12T14:03:59+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/presentations/2023_auscert/</loc></url><url><loc>https://docs.velociraptor.app/docs/deployment/troubleshooting/</loc></url><url><loc>https://docs.velociraptor.app/presentations/2023_velocon/</loc></url><url><loc>https://docs.velociraptor.app/blog/</loc><lastmod>2023-07-27T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/deployment/references/</loc></url><url><loc>https://docs.velociraptor.app/presentations/</loc></url><url><loc>https://docs.velociraptor.app/exchange/</loc><lastmod>2021-06-12T14:03:59+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/artifact_references/</loc><lastmod>2021-06-12T14:03:59+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/</loc></url><url><loc>https://docs.velociraptor.app/rss/</loc></url><url><loc>https://docs.velociraptor.app/search/</loc><lastmod>2021-06-12T06:14:26+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/random/</loc><lastmod>2023-08-09T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/random/</loc><lastmod>2023-08-09T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/</loc><lastmod>2023-08-09T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/vql/</loc><lastmod>2023-08-09T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/release/</loc><lastmod>2023-07-27T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2023/2023-07-27-release-notes-0.7.0/</loc><lastmod>2023-07-27T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/archiving/</loc><lastmod>2023-07-24T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/deployment/</loc><lastmod>2023-07-24T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/clone_organization_to_other_server/</loc><lastmod>2023-07-24T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/orgs/</loc><lastmod>2023-07-24T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/configuration/</loc><lastmod>2023-05-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2023/2023-05-05-release-notes-0.6.9/</loc><lastmod>2023-05-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/plugin_not_found/</loc><lastmod>2023-05-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2023/2023-04-05-qakbot/</loc><lastmod>2023-04-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/detection/</loc><lastmod>2023-04-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/malware/</loc><lastmod>2023-04-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/qakbot/</loc><lastmod>2023-04-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/qbot/</loc><lastmod>2023-04-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/community/</loc><lastmod>2023-04-01T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2023/2023-04-03-velociraptor-survey/</loc><lastmod>2023-04-01T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/containment/</loc><lastmod>2023-03-04T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/quarantine/</loc><lastmod>2023-03-04T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/quarantine/</loc><lastmod>2023-03-04T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2023/2023-02-13-release-notes-0.6.8/</loc><lastmod>2023-02-13T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2023/2023-01-13-tracking-an-adversary-in-realtime/</loc><lastmod>2023-01-09T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-11-21-release-notes/</loc><lastmod>2022-11-19T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/decimal/</loc><lastmod>2022-11-02T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/decode/</loc><lastmod>2022-11-02T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/decimaldecode/</loc><lastmod>2022-11-02T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/collector/</loc><lastmod>2022-10-10T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/automate_offline_collector/</loc><lastmod>2022-10-10T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/retry_hunt/</loc><lastmod>2022-09-10T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/hunt_by_label/</loc><lastmod>2022-09-10T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/hunting/</loc><lastmod>2022-09-10T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/labels/</loc><lastmod>2022-09-10T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-08-17-process-tracker/</loc><lastmod>2022-09-07T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-08-15-release-notes/</loc><lastmod>2022-09-07T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/getting_latest_release/</loc><lastmod>2022-09-03T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/forensics/</loc><lastmod>2022-08-03T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/notebook/</loc><lastmod>2022-08-03T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-08-04-post-processing/</loc><lastmod>2022-08-03T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-06-21-release-notes/</loc><lastmod>2022-06-21T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/encode/</loc><lastmod>2022-06-06T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/urldecode/</loc><lastmod>2022-06-06T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/url/</loc><lastmod>2022-06-06T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/multiparts_uploads/</loc><lastmod>2022-05-21T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/huntlabel/</loc><lastmod>2022-05-20T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/reconfigure_offline_collector/</loc><lastmod>2022-05-06T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/gui/</loc><lastmod>2022-04-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/merging_config/</loc><lastmod>2022-04-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/favorites/</loc><lastmod>2022-04-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/rolling_certificates/</loc><lastmod>2022-04-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/glibc_errors/</loc><lastmod>2022-04-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/startup_artifacts/</loc><lastmod>2022-04-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/registry_finder/</loc><lastmod>2022-04-25T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/searching/</loc><lastmod>2022-04-25T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-03-23-release-notes/</loc><lastmod>2022-04-21T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/ssl/</loc><lastmod>2022-04-18T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/proxy/</loc><lastmod>2022-04-15T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/notebook_timeout/</loc><lastmod>2022-03-29T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/admin/</loc><lastmod>2022-03-27T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/upgrading/</loc><lastmod>2022-03-27T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/identifier_with_space/</loc><lastmod>2022-03-27T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/automation/</loc><lastmod>2022-03-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/automating_labels/</loc><lastmod>2022-03-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/multiple_oauth/</loc><lastmod>2022-03-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/sso/</loc><lastmod>2022-03-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/debugging/</loc><lastmod>2022-03-21T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/debugging_clients/</loc><lastmod>2022-03-21T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/deploying_in_agentless_mode/</loc><lastmod>2022-03-21T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-03-22-deaddisk/</loc><lastmod>2022-03-20T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-03-21-paths/</loc><lastmod>2022-03-20T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/asep/</loc><lastmod>2022-01-12T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/etw/</loc><lastmod>2022-01-12T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/t1546.003/</loc><lastmod>2022-01-12T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/wmi/</loc><lastmod>2022-01-12T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-01-12-wmi-eventing/</loc><lastmod>2022-01-12T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/linux/</loc><lastmod>2022-01-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-01-05-searching-for-files-on-linux/</loc><lastmod>2022-01-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-01-05-release-notes-0.6.3/</loc><lastmod>2022-01-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/aws/</loc><lastmod>2021-12-20T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/offline-collector/</loc><lastmod>2021-12-20T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-12-11-sftp-in-aws/</loc><lastmod>2021-12-20T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/cobalt-strike/</loc><lastmod>2021-11-09T04:54:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-11-09-eql2vql/</loc><lastmod>2021-11-09T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-10-22-a-closer-look-at-the-winning-entry-in-the-2021-velociraptor-contributor-competition-575c387610af/</loc><lastmod>2021-10-20T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-10-08-contributor-contest/</loc><lastmod>2021-10-12T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-09-17-carlos-intro/</loc><lastmod>2021-09-17T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-09-07-release-notes-0.6.1/</loc><lastmod>2021-09-06T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-09-03-process-spoofing/</loc><lastmod>2021-09-03T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-08-18-velociraptor-and-etw/</loc><lastmod>2021-09-02T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/carving/</loc><lastmod>2021-06-16T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/</loc><lastmod>2021-06-16T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/usn/</loc><lastmod>2021-06-16T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/windows/</loc><lastmod>2021-06-16T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/parsing/</loc><lastmod>2021-06-09T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/security/</loc><lastmod>2021-06-09T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-06-09-verifying-executables-on-windows-1b3518122d3c/</loc><lastmod>2021-06-09T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/scalability/</loc><lastmod>2021-04-29T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-04-29-scaling-velociraptor-57acc4df76ed/</loc><lastmod>2021-04-29T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/server/</loc><lastmod>2021-04-29T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/velociraptor/</loc><lastmod>2021-04-29T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-04-21-the-next-phase-of-velociraptor-bf696c2c3491/</loc><lastmod>2021-04-21T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-04-16-digging-into-process-memory-33c60a640cdb/</loc><lastmod>2021-04-16T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/memory/</loc><lastmod>2021-04-16T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-02-13-digging-for-files-with-velociraptor-a1c0a21e242b/</loc><lastmod>2021-02-13T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/filesystems/</loc><lastmod>2021-02-13T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-02-03-migrating-from-osquery-to-velociraptor-d4143799953f/</loc><lastmod>2021-02-03T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/osquery/</loc><lastmod>2021-02-03T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-02-02-detecting-dll-hijacking-with-vql-e9a735354257/</loc><lastmod>2021-02-02T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-01-29-disabled-event-log-files-a3529a08adbe/</loc><lastmod>2021-01-29T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/logs/</loc><lastmod>2021-01-29T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-01-22-concurrent-vql-6d381fdb0b1f/</loc><lastmod>2021-01-22T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/performance/</loc><lastmod>2021-01-22T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-01-19-parsing-binary-files-d31114a41f14/</loc><lastmod>2021-01-19T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/integration/</loc><lastmod>2020-12-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/slack/</loc><lastmod>2020-12-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-12-26-slack-and-velociraptor-b63803ba4b16/</loc><lastmod>2020-12-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-12-13-velociraptor-and-osquery-2a4306dd23c/</loc><lastmod>2020-12-13T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-11-13-the-windows-usn-journal-f0c55c9010e/</loc><lastmod>2020-11-12T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/internals/</loc><lastmod>2020-09-27T01:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-09-28-velociraptor-network-communications-30568624043a/</loc><lastmod>2020-09-27T01:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/authentication/</loc><lastmod>2020-08-16T01:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-08-17-velociraptor-sso-authentication-6dd68d46dccf/</loc><lastmod>2020-08-16T01:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-08-16-profiling-the-beast-58913437fd16/</loc><lastmod>2020-08-16T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-07-14-triage-with-velociraptor-pt-4-cf0e60810d1e/</loc><lastmod>2020-07-14T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/tools/</loc><lastmod>2020-07-13T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-07-13-velociraptor-in-the-tool-age-d896dfe71b9/</loc><lastmod>2020-07-13T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/low-level/</loc><lastmod>2020-06-19T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-06-19-the-velociraptor-query-language-pt-2-fe92bb7aa150/</loc><lastmod>2020-06-19T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-06-14-the-velociraptor-query-language-pt-1-d721bff100bf/</loc><lastmod>2020-06-14T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-04-16-velociraptor-e48a47e0317d/</loc><lastmod>2020-04-16T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-03-29-velociraptors-acl-model-7f497575daee/</loc><lastmod>2020-03-29T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-03-28-velociraptor-notebooks-d02e0bd11230/</loc><lastmod>2020-03-28T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-03-07-extending-vql-plugins-7fb004cb6ec4/</loc><lastmod>2020-03-07T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-03-06-velociraptor-post-processing-with-jupyter-notebook-and-pandas-8a344d05ee8c/</loc><lastmod>2020-03-06T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-01-12_hunting-malware-using-mutants-ea08e86dfc19/</loc><lastmod>2020-01-12T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/2019-12-31_digging-into-the-system-resource-usage-monitor-srum-afbadb1a375/</loc><lastmod>2019-12-31T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/2019-12-08-velociraptor-to-elasticsearch-3a9fc02c6568/</loc><lastmod>2019-12-08T23:50:52+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/2019-11-15_recovering-deleted-ntfs-files-with-velociraptor-1fcf09855311/</loc><lastmod>2019-11-15T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/2019-11-12_windows-event-logs-d8d8e615c9ca/</loc><lastmod>2019-11-12T10:40:24+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/2019-10-08_triage-with-velociraptor-pt-3-d6f63215f579/</loc><lastmod>2019-10-08T09:03:34+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/2019-10-04_triage-with-velociraptor-pt-2-d0f79066ca0e/</loc><lastmod>2019-10-04T23:50:52+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/2019-10-02_triage-with-velociraptor-pt-1-253f57ce96c0/</loc><lastmod>2019-10-02T13:32:39+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/2019-09-11_velociraptor-s-client-side-buffer-3ce03697a4e6/</loc><lastmod>2019-09-11T00:31:39+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/categories/blog/</loc><lastmod>2019-09-03T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/categories/</loc><lastmod>2019-09-03T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/09/03/velociraptor_s_client_communications/</loc><lastmod>2019-09-03T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2019/08/28/the_velociraptor_api/</loc><lastmod>2019-08-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/2019-03-02/</loc><lastmod>2019-03-02T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2019/03/02/agentless_hunting_with_velociraptor/</loc><lastmod>2019-03-02T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2019/02/14/alerting_on_event_patterns/</loc><lastmod>2019-02-14T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2019/02/10/velociraptor_performance/</loc><lastmod>2019-02-10T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2019/02/09/velociraptor_python_api/</loc><lastmod>2019-02-09T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/12/23/deploying_velociraptor_with_oauth_sso/</loc><lastmod>2018-12-23T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/12/22/configuring_velociraptor_for_ssl/</loc><lastmod>2018-12-22T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/12/11/velociraptor_interactive_shell/</loc><lastmod>2018-12-11T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/12/10/server_side_vql_queries_and_events/</loc><lastmod>2018-12-10T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/12/09/more_on_client_event_collection/</loc><lastmod>2018-12-09T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/11/13/velociraptor_training_at_nzitf/</loc><lastmod>2018-11-13T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/11/09/event_queries_and_endpoint_monitoring/</loc><lastmod>2018-11-09T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/09/30/velorciraptor_s_filesystem_s_accessors/</loc><lastmod>2018-09-30T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/09/29/detecting_powershell_persistence_with_velociraptor_and_yara/</loc><lastmod>2018-09-29T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/09/03/velociraptor_walk_through_and_demo/</loc><lastmod>2018-09-03T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/08/20/velociraptor_artifacts/</loc><lastmod>2018-08-20T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/08/10/design_differences_between_velociraptor_and_grr/</loc><lastmod>2018-08-10T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/08/10/files_files_everything_is_just_a_file/</loc><lastmod>2018-08-10T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/08/10/hunting_what_velociraptors_do_best/</loc><lastmod>2018-08-10T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/08/10/interrogation_make_the_endpoint_tell_us_what_it_knows/</loc><lastmod>2018-08-10T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/08/10/the_velocidex_query_language/</loc><lastmod>2018-08-10T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/08/10/introducing_velociraptor/</loc><lastmod>2018-08-09T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/automate_offline_collector/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/automating_labels/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/clone_organization_to_other_server/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/debugging_clients/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/decimaldecode/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/deploying_in_agentless_mode/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/favorites/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/getting_latest_release/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/glibc_errors/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/hunt_by_label/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/huntlabel/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/identifier_with_space/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/merging_config/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/multiparts_uploads/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/multiple_oauth/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/notebook_timeout/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/plugin_not_found/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/proxy/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/quarantine/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/random/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/reconfigure_offline_collector/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/registry_finder/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/retry_hunt/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/rolling_certificates/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/ssl/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/startup_artifacts/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/upgrading/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/urldecode/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/add_client_monitoring/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/add_server_monitoring/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/admin.client.remove/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/admin.client.uninstall/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/admin.client.upgrade/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/admin.events.postprocessuploads/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/admin.system.compressuploads/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/alert/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/powerpickhostversion/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/all/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/amsi/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/any/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/appcompatcache/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/array/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/artifact_definitions/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/artifact_delete/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/artifact_set/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/atexit/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/atoi/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/linux/audit/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/authenticode/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/base64decode/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/base64encode/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/base85decode/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/basename/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/batch/</loc></url><url><loc>https://docs.velociraptor.app/golang/binparsergen/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/cache/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/cancel_flow/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/certificates/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/chain/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/cidr_contains/</loc></url><url><loc>https://docs.velociraptor.app/tags/client-artifact/</loc></url><url><loc>https://docs.velociraptor.app/tags/client-event-artifact/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/client_create/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/client_delete/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/client_info/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/client_metadata/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/client_set_metadata/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/clients/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/clock/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/collect/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/collect_client/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/column_filter/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/combine/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/commandline_split/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/compress/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/connections/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/copy/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/count/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/create_flow_download/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/create_hunt_download/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/create_notebook_download/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/crypto_rc4/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/custom.linux.sudousers/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.nirsoft.lastactivityview/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.services.hijacking/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/delay/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/delete_events/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/delete_flow/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/demo.plugins.fifo/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/demo.plugins.gui/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/detection.application.cursedchrome/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/dict/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/diff/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/dirname/</loc></url><url><loc>https://docs.velociraptor.app/discord/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/dns/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/efivariables/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/elastic_upload/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/elastic.events.clients/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/elastic.events.upload/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/elastic.flows.upload/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/encode/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/entropy/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/enumerate/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/enumerate_flow/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/environ/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/environ/</loc></url><url><loc>https://docs.velociraptor.app/tags/event/</loc></url><url><loc>https://docs.velociraptor.app/golang/evtx/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/exchange.label.user/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.kunai/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/exchange.server.enrichment.gimphash/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/execve/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/expand/</loc></url><url><loc>https://docs.velociraptor.app/tags/exploit/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/favorites_delete/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/favorites_save/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/fifo/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/file_store/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/file_store_delete/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/filesystems/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/filter/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/flatten/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/flow_logs/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/flow_results/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/flows/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/for/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/foreach/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/format/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/gcs_pubsub_publish/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/generate/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.applications.chrome.sessionstorage/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.applications.office.keywords/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.client.diskspace/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.client.info/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.client.profile/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.client.rekey/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.client.stats/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.client.trace/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.client.vql/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/generic.collection.uac/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.collectors.file/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.collectors.sqlecmd/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.detection.hashhunter/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/log4jrce/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/log4jvulnhunter/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/generic.detection.lunaseclog4shell/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/manageenginelog/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.detection.yara.glob/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.detection.yara.zip/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.forensic.carving.urls/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.forensic.hashlookup/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.forensic.localhashes.glob/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.forensic.localhashes.init/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.forensic.localhashes.query/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.forensic.sqlitehunter/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.forensic.timeline/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/generic.forensics.cylr/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.network.interfaceaddresses/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.system.efisignatures/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.system.hostsfile/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.system.processsiblings/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.system.pstree/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.utils.fetchbinary/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/geoip/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/get/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/get_client_monitoring/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/get_flow/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/get_server_monitoring/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/getpid/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/glob/</loc></url><url><loc>https://docs.velociraptor.app/golang/go-ese/</loc></url><url><loc>https://docs.velociraptor.app/golang/go-yara/</loc></url><url><loc>https://docs.velociraptor.app/golang/go-ntfs/</loc></url><url><loc>https://docs.velociraptor.app/golang/go-pe/</loc></url><url><loc>https://docs.velociraptor.app/golang/go-prefetch/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/grep/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/grok/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/gui_users/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/gunzip/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/handles/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/hash/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/hash_run_keys/</loc></url><url><loc>https://docs.velociraptor.app/tags/hijacking/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/http_client/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/humanize/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/hunt/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/hunt_add/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/hunt_delete/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/hunt_flows/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/hunt_results/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/hunt_update/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/hunts/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/if/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/if/</loc></url><url><loc>https://docs.velociraptor.app/tags/impacket/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/import_collection/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/info/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/int/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/interfaces/</loc></url><url><loc>https://docs.velociraptor.app/tags/internal-artifact/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/inventory/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/inventory_add/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/inventory_get/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/ip/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/ipcheck.virustotal/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/iris.sync.asset/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/iris.timeline.add/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/items/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/join/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/experimental/js/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/experimental/js_call/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/js_get/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/js_set/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/killkillkill/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/label/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/label.domaincontroller/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/len/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/leveldb/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.applications.chrome.extensions/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.applications.chrome.extensions.upload/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.applications.docker.info/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.applications.docker.version/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.applications.wgethsts/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.carving.sshlogs/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.autoruns/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.browserextensions/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.browserhistory/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.catscale/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.dbconfig/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.historyfiles/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.networkconfig/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.sysconfig/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.syslogs/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.userconfig/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.debian.aptsources/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.debian.gpgkeys/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.debian.packages/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.detection.anomalousfiles/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/confluencelogs/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.detection.cve20214034/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.detection.incorrectpermissions/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.detection.memfd/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.detection.sshkeyfilecmd/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.detection.vrealizeloginsightexploitation/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.detection.yara.process/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.events.processexecutions/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.events.sshbruteforce/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.events.sshlogin/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.forensics.journal/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.forensics.recentlyused/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.kapefiles.collectfromdirectory/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.loganalysis.chopchopgo/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linuxmemoryacquisition/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.memory.avml/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.mounts/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.network.netstat/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.network.netstat/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.network.netstatenriched/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.network.nm.connections/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.network.packetcapture/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.osquery.generic/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.privilegeescalationdetection/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.proc.arp/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.proc.modules/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.remediation.quarantine/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.remediation.quarantine/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.rhel.packages/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.search.filefinder/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.ssh.authorizedkeys/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.ssh.knownhosts/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.ssh.privatekeys/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.suse.packages/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.acpitables/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.sys.apthistory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.bashhistory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.bashshell/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.cputime/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.crontab/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.sys.journalctl/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.lastuserlogin/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.loghunter/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.maps/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.pslist/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.services/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.suid/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.sys.systemdtimer/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.users/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.sysinternals.sysmon/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.sysinternals.sysmonevent/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.syslog.sshlogin/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.system.bashlogout/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.system.pam/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.triage.processmemory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.users.interactiveusers/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.users.rootusers/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/volatility_profile/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/log/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/logging/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/logscale_upload/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/logscale.events.clients/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/logscale.flows.upload/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/lookupsid/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/lowcase/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/lru/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/lzxpress_decompress/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.applications.cache/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.applications.chrome.history/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.applications.firefox.history/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.applications.knowledgec/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.applications.mru/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.applications.networkusage/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.applications.notes/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.applications.safari.downloads/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.applications.safari.history/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.applications.savedstate/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.collection.aftermath/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.detection.autoruns/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.detection.installhistory/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.files.filemonitor/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.forensics.appledoublezip/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.forensics.fsevents/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.forensics.fsevents/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/knockknock/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.logs.macmonitor/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.network.applicationlayerfirewall/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.network.bluetooth/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.network.dhcp/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.network.littlesnitch/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.network.packetcapture/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.network.recentwifinetworks/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.osquery.generic/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.parallelsvm.suspendedmemory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.search.filefinder/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.sys.automator/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.sys.bashhistory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.system.dock/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.system.locationservices/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.system.man/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.system.mounteddiskimages/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.system.packages/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.system.plist/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.system.quarantineevents/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.system.tcc/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.system.timemachine/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.system.users/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.system.wifi/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.unifiedloghunter/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.unifiedlogparser/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/magic/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/mail/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/mail/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/max/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/memoize/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/min/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/mock_clear/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/mock_replay/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/modules/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/monitoring/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/monitoring_logs/</loc></url><url><loc>https://docs.velociraptor.app/docs/deployment/cloud/multifrontend/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/netcat/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/netstat/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/netstat/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/network.externalipaddress/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/notebook_delete/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/now/</loc></url><url><loc>https://docs.velociraptor.app/golang/oleparse/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/olevba/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/org/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/org_create/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/org_delete/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/orgs/</loc></url><url><loc>https://docs.velociraptor.app/golang/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/parallelize/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_auditd/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_binary/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_csv/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_ese/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_ese_catalog/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_evtx/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_float/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_json/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_json_array/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_jsonl/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_lines/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_mft/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_ntfs/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_ntfs_i30/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_ntfs_ranges/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_pe/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_pkcs7/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_records_with_regex/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_recyclebin/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_string_with_regex/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_usn/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_x509/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_xml/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_yaml/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/partitions/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/passwd/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/patch/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/path_join/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/path_split/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/pathspec/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/pe_dump/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/pipe/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/pk_decrypt/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/pk_encrypt/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/plist/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/prefetch/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/proc_dump/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/proc_yara/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/process_tracker/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/process_tracker_all/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/process_tracker_callchain/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/process_tracker_children/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/process_tracker_get/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/process_tracker_pslist/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/process_tracker_tree/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/process_tracker_updates/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/profile/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/profile_goroutines/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/profile_memory/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/pskill/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/pslist/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/pslist.vtlookup/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/query/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/query/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/rand/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/range/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/rate/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/read_crypto_file/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/read_file/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/read_file/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/read_reg_key/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/reg_rm_key/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/reg_rm_value/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/reg_set_value/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/regex_replace/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/regex_transform/</loc></url><url><loc>https://docs.velociraptor.app/tags/registry/</loc></url><url><loc>https://docs.velociraptor.app/golang/regparser/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/rekey/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/relpath/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/remap/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/repack/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/reporting.default/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/reporting.hunts.details/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/rm/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/rm_client_monitoring/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/rm_server_monitoring/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/rot13/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/sample/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/scope/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/scope/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/send_event/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/experimental/sequence/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/serialize/</loc></url><url><loc>https://docs.velociraptor.app/tags/server-artifact/</loc></url><url><loc>https://docs.velociraptor.app/tags/server-event-artifact/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/server_frontend_cert/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/server_metadata/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/server_set_metadata/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/genericmonitor/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.alerts.iris.case.create/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.alerts.mattermost/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.alerts.monitor.iris/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.alerts.notification/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.alerts.processcreation/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.alerts.psexec/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.alerts.thehive.alert/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.alerts.thehive.case/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.alerts.trackaccount/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.alerts.winpmem/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/cyberchefserver/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.audit.logs/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.enrichment.cortexanalyzer/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.enrichment.echotrail/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.enrichment.geoip/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.enrichment.geoipisp/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.enrichment.greynoise/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.enrichment.hybridanalysis/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.enrichment.iris.ioclookup/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.enrichment.malwarebazaar/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.enrichment.openai/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.enrichment.strelka.filescan/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.enrichment.sublime.emailanalysis/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.enrichment.threatfox/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.enrichment.virustotal/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.enrichment.virustotal.filescan/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/findflows/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.hunts.addflow/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.hunts.cancelanddelete/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.hunts.list/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.hunts.results/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.import.artifactexchange/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.import.artifactexchange/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.import.deleteartifacts/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/detectraptor/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.import.previousreleases/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.information.clients/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.information.users/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.alerts/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.artifactdescription/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.artifactmodification/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.clientconflict/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.clientdelete/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.clientinfo/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.clientinfosnapshot/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.clientping/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.clienttasks/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.enrollment/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.frontendmetrics/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.huntmodification/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.huntupdate/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.interrogate/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.interrogation/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.inventory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.label/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.masterregistrations/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.metadatamodifications/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.notifications/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.ping/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.pong/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.tooldependencies/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.welcome/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.monitor.autolabeling.clients/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.monitor.clientconflict/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.monitor.health/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.monitor.profile/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.monitor.shell/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.monitor.velometrics/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.monitoring.clientcount/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.monitoring.schedulehunt/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.notification.mastodon/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.notification.mattermost/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.orgs.listorgs/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.orgs.neworg/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.powershell.encodedcommand/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.slack.clients.enrolled/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.slack.clients.online/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.telegram.clients.enrolled/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.addtimeline/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.adduser/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.utils.backupazure/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.backupdirectory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.backupgcs/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.backups3/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.cancelhunt/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.collectclient/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.createcollector/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.createmsi/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.deleteclient/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/deleteclientlabel/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.deleteevents/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.deletefavoriteflow/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.deleteflow/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.deletemanyflows/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.deletemonitoringdata/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.deletenotebook/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.importcollection/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.listusers/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.utils.orphanedflows/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.utils.querysummary/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.reindex/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.savefavoriteflow/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.utils.scheduleddeletion/</loc></url><url><loc>https://docs.velociraptor.app/tags/services/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/set/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/set_client_monitoring/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/set_server_monitoring/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/sigma/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/sigma_log_sources/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/sleep/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/slice/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/source/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/split/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/split_records/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/splunk_upload/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/splunk.events.clients/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/splunk.flows.upload/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/sql/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/sqlite/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/srum_lookup_id/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/starl/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/stat/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/str/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/strip/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/substr/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/sum/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/switch/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/sysinfo/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/system.flow.archive/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/system.flow.completion/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/system.hunt.archive/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/system.hunt.creation/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/system.hunt.participation/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/system.upload.completion/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/system.vfs.downloadfile/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/system.vfs.listdirectory/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/tempdir/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/tempfile/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/timeline/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/timeline_add/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/timestamp/</loc></url><url><loc>https://docs.velociraptor.app/golang/timetracker/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/tlsh_hash/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/to_dict/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/token/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/trace/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/triage.collection.upload/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/triage.collection.uploadtable/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/unhex/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/unzip/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/upcase/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/upload/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/upload_azure/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/upload_directory/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/upload_gcs/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/upload_s3/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/upload_sftp/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/upload_smb/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/upload_webdav/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/uploads/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/url/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/user/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/user_create/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/user_delete/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/user_grant/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/users/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/utf16/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/utf16_encode/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/uuid/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/vad/</loc></url><url><loc>https://docs.velociraptor.app/golang/velociraptor/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/version/</loc></url><url><loc>https://docs.velociraptor.app/golang/vfilter/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/vfs_ls/</loc></url><url><loc>https://docs.velociraptor.app/tags/vmware/</loc></url><url><loc>https://docs.velociraptor.app/tags/vrealize/</loc></url><url><loc>https://docs.velociraptor.app/golang/vtypes/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/watch_auditd/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/watch_csv/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/watch_etw/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/watch_evtx/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/watch_monitoring/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/watch_syslog/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/watch_usn/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/whoami/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.activedirectory.bloodhound/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/activedirectoryprivilegedusers/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.analysis.capa/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.analysis.evidenceofdownload/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.analysis.evidenceofexecution/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/suspiciouswmiconsumers/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.application.firefox.downloads/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.applications.anydesk/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.applications.anydesk.logparser/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.chocolateypackages/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.chrome.cookies/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.chrome.extensions/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.chrome.history/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/cylance/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/defenderdhparser/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.applications.defenderhistory/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/defenderquarantineextract/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/diec/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.edge.favicons/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.edge.history/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.firefox.downloads/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.firefox.history/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.applications.freefilesync/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/ftkimager/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.applications.goodsync/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.iislogs/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/kace_sw_process/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.applications.lecmd/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.megasync/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.nirsoftbrowserviewer/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.officemacros/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macroraptor/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/officeservercache/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.sbecmd/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.teamviewer.incoming/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.attack.parentprocess/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.attack.prefetch/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.attack.unexpectedimagepath/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.attacksimulation.atomicredteam/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/exports/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/bulkfile/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/brc4/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/bumblebee/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.carving.cobaltstrike/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/qakbot/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/squirrelwaffle/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/systembc/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.carving.usn/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.carving.usnfiles/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.collectors.file/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.collectors.vss/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.amcache/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.binaryhunter/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.binaryrename/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.detection.bruteratel/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.cryptneturlcache/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.environmentvariables/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.forwardedimports/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/idatloader/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.impersonation/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.detection.isomount/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/magicweb/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/malfind/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/moveit/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/msdtfollina/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.mutants/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.detection.network.changed/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/ntdsutil/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/onenote/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.detection.pipehunter/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/prefetchhunter/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/printnightmare/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.processcreation/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/proxyhunter/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.detection.proxylogon.proxyshell/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.psexecservice/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.psexecservice.kill/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/publicip/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.registry/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/remoteiconforcedauth/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.detection.scmanagerbackdoor/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.service.upload/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/smoothoperator/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/sysaid/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/teamviewerlanguage/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.templateinjection/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/termsrv/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.thumbdrives.list/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.thumbdrives.officekeywords/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.thumbdrives.officemacros/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/unattendxml/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/usbyara/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.usn/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.wmiprocesscreation/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.detection.wonkavision/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/ws_ftp/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.yara.device/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.yara.ntfs/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.yara.physicalmemory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.yara.process/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/yara.uefi/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/amsi/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.etw.detectprocessspoofing/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.etw.dns/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.etw.dnsofflinecollector/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.etw.dnsqueriesserver/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.etw.edgeurls/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.etw.etwsessions/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.etw.filecreation/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/powershellmonitoring/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.etw.registry/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.etw.viewsessions/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/wmieventing/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.etw.wmiprocesscreate/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.alternatelogon/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.aurora/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/bitsadmin/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.chainsaw/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.cleared/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/condensedaccountusage/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.dhcp/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.evtx/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.evtxhunter/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.evtxhussar/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.explicitlogon/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.hayabusa/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.kerbroasting/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.logonsessions/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.modifications/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/moveitevtx/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.powershellmodule/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.powershellscriptblock/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.rdpauth/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.rdpclientactivity/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/recordidcheck/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.remoteaccessvpn/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.rpcfirewall/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.scheduledtasks/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.servicecreationcomspec/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.symantec/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.telerik/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.wonkavision/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.zircolite/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.eventlogmodifications/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.events.eventlogmodifications/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.failedlogbeforesuccess/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.kerberoasting/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.kerbroasting/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.mutants/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.processcreation/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.servicecreation/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/sysmonarchivemonitor/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/sysmonregistry/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.trackaccount/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.trackprocesses/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.events.trackprocesses.useexistingsysmononly/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.trackprocessesbasic/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.bam/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.bulkextractor/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.certutil/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.forensics.clipboard/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.filenamesearch/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/filezilla/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.lnk/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.localhashes.usn/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.partitiontable/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.prefetch/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.processinfo/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.rdpcache/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.recentapps/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.forensics.recentfilecache/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.recyclebin/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.sam/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.shellbags/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.solarwindssunburst/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.srum/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.timeline/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.uefi/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/uefi/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/bootapplication/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.useraccesslogs/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.usn/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.generic.internet.blockaccess/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.kapefiles.extract/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.kapefiles.remapping/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.kapefiles.targets/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.memory.acquisition/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/hollowshunter/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/injectedthreadex/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.memory.intezer/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.memory.pedump/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.memory.processdump/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.memory.processinfo/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/custom.windows.mobaxterm.passwords/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/usbplugin/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/printnightmaremonitor/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.network.arpcache/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.network.interfaceaddresses/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.network.listeningports/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.network.netstat/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.network.netstatenriched/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.network.packetcapture/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.ntfs.adshunter/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.ntfs.extendedattributes/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.ntfs.i30/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.ntfs.mft/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.ntfs.mft.hivenightmare/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.ntfs.recover/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/timestomp/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.office.mru/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.osquery.generic/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.packs.lateralmovement/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.packs.persistence/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.persistence.debug/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.persistence.permanentwmievents/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.persistence.powershellprofile/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.persistence.powershellregistry/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/vscodetasks/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.persistence.wow64cpu/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.persistencesniper/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.appcompatcache/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/ateranetworks/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.backuprestore/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/backuprestore/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.registry.bulk.computername/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.registry.capabilityaccessmanager/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.registry.comautoapprovallist/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.registry.disabledcortexxdr/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/cve_2021_40444/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/defenderconfig/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.registry.domainname/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.enabledmacro/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.enableunsafeclientmailrules/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/hiddenusers/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/hvci/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.mountpoints2/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.registry.netshhelperdlls/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.ntuser/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.ntuser.upload/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.portproxy/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.registry.printnightmare/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.puttyhostkeys/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.rdp/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.recentdocs/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.sysinternals.eulacheck/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.registry.taskcache.hiddentasks/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.userassist/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.wdigest/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/globremediation/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/killprocess/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/printspoolerremediation/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/processremediation/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.remediation.quarantine/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.remediation.quarantinemonitor/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/registryremediation/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.remediation.scheduledtasks/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.remediation.sinkhole/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.search.filefinder/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.search.smbfilefinder/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.search.vss/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.search.yara/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.allusers/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.appcompatshims/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.certificateauthorities/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.diskinfo/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.drivers/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.firewallrules/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.interfaces/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.sys.loggedinusers/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.physicalmemoryranges/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.programs/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.startupitems/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.users/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sysinternals.autoruns/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/sysmonarchive/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sysinternals.sysmoninstall/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sysinternals.sysmonlogforward/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.system.accesscontrollist/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.amcache/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.system.appcompatpca/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.auditpolicy/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/binaryversion/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.catfiles/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.cmdshell/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.criticalservices/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.dlls/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.dnscache/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.domainrole/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.handles/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.hostsfile/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.localadmins/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/powerefficiencydiagnostics/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.powershell/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/iseautosave/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.powershell.moduleanalysiscache/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.powershell.psreadline/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/printerdriver/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.pslist/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.rootcastore/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.services/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.system.services.sliverpsexec/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.shares/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.signers/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.svchost/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.taskscheduler/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.untrustedbinaries/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.vad/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.vbscript/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.system.windowserrorreporting/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.system.wmiproviders/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.wmiquery/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.timeline.mft/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.timeline.prefetch/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.timeline.prefetch.improved/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.timeline.registry.runmru/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.triage.highvaluememory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.triage.processmemory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.triage.sds/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/sysmontriage/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/custom.windows.winscp.passwords/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/winobj/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/wmi/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/wmi_events/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/write_crypto_file/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/write_csv/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/write_jsonl/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/xor/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/yara/</loc></url></urlset>
\ No newline at end of file
+<?xml version="1.0" encoding="utf-8" standalone="yes"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml"><url><loc>https://docs.velociraptor.app/blog/2023/</loc><lastmod>2023-01-01T06:54:15+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/</loc><lastmod>2022-01-01T06:54:15+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/</loc><lastmod>2021-06-10T06:54:15+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/</loc><lastmod>2021-06-10T07:41:37+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/</loc><lastmod>2021-06-10T06:54:15+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/overview/history/</loc><lastmod>2021-06-09T03:51:18+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/gui/clients/</loc><lastmod>2021-06-09T04:12:07+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/deployment/self-signed/</loc><lastmod>2021-06-09T04:00:52+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/overview/</loc><lastmod>2021-06-09T02:33:37+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/announcements/</loc></url><url><loc>https://docs.velociraptor.app/presentations/2021_auscert/</loc></url><url><loc>https://docs.velociraptor.app/docs/server_automation/server_api/</loc><lastmod>2021-06-30T12:31:08+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/gui/vfs/</loc><lastmod>2021-06-09T04:12:50+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/deployment/</loc><lastmod>2021-06-09T03:52:24+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/08/10/browsing_around_the_filesystem/</loc><lastmod>2018-08-10T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/announcements/2021-artifact-contest/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/</loc></url><url><loc>https://docs.velociraptor.app/docs/deployment/cloud/</loc></url><url><loc>https://docs.velociraptor.app/announcements/2023-cves/</loc></url><url><loc>https://docs.velociraptor.app/presentations/2021_dfrws_us/</loc></url><url><loc>https://docs.velociraptor.app/announcements/2022-velocon/</loc></url><url><loc>https://docs.velociraptor.app/docs/overview/support/</loc></url><url><loc>https://docs.velociraptor.app/docs/gui/artifacts/</loc><lastmod>2021-06-09T04:03:42+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/presentations/2021_osdfc/</loc></url><url><loc>https://docs.velociraptor.app/presentations/2021_blueteam_village/</loc></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-11-09-vql-data-manipulation/</loc><lastmod>2021-11-09T04:54:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-07-12-velociraptor-vs-printnightmare/</loc><lastmod>2021-07-11T18:13:50+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/</loc><lastmod>2021-06-23T08:29:57+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/forensic/filesystem/</loc><lastmod>2021-06-12T23:25:17+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/</loc><lastmod>2021-06-12T07:11:04+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/vql/notebooks/</loc><lastmod>2021-06-11T15:32:04+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/gui/hunting/</loc><lastmod>2021-06-09T04:13:25+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/gui/</loc><lastmod>2021-06-09T04:02:57+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/deployment/clients/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/linux/</loc></url><url><loc>https://docs.velociraptor.app/presentations/2022_linuxconf_au/</loc></url><url><loc>https://docs.velociraptor.app/announcements/2023-trainings/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/</loc></url><url><loc>https://docs.velociraptor.app/docs/deployment/rbac/</loc><lastmod>2021-06-09T03:11:23+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/forensic/searching/</loc><lastmod>2021-06-17T02:30:41+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/vql/artifacts/</loc><lastmod>2021-06-12T05:20:45+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/vql/</loc><lastmod>2021-06-11T05:55:46+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/</loc></url><url><loc>https://docs.velociraptor.app/presentations/2022_auscert/</loc></url><url><loc>https://docs.velociraptor.app/docs/forensic/</loc><lastmod>2021-06-12T21:56:33+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/presentations/2022_dfrws_us/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/</loc></url><url><loc>https://docs.velociraptor.app/docs/offline_triage/remote_uploads/</loc><lastmod>2023-04-02T04:31:24+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/offline_triage/</loc><lastmod>2021-06-27T04:31:24+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/presentations/2022_tech_user_group_cbr/</loc></url><url><loc>https://docs.velociraptor.app/docs/client_monitoring/</loc><lastmod>2021-06-30T12:31:08+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/forensic/ntfs/</loc><lastmod>2021-06-26T20:10:17+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/forensic/binary/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/</loc></url><url><loc>https://docs.velociraptor.app/docs/deployment/resources/</loc></url><url><loc>https://docs.velociraptor.app/docs/extending_vql/</loc><lastmod>2021-06-27T04:29:26+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/server_automation/</loc><lastmod>2021-06-30T12:31:08+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/server_automation/server_monitoring/</loc><lastmod>2021-06-30T12:31:08+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/forensic/evidence_of_execution/</loc><lastmod>2021-06-27T04:12:21+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/vql_reference/</loc><lastmod>2021-06-12T05:12:26+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/vql_reference/experimental/</loc></url><url><loc>https://docs.velociraptor.app/presentations/2022_sans_summit/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/</loc></url><url><loc>https://docs.velociraptor.app/presentations/2022_velocon/</loc></url><url><loc>https://docs.velociraptor.app/docs/forensic/event_logs/</loc><lastmod>2021-06-27T04:34:03+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/vql/events/</loc><lastmod>2021-06-12T20:57:18+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/presentations/2022_dfrws_apac/</loc></url><url><loc>https://docs.velociraptor.app/presentations/2023_everything_open/</loc></url><url><loc>https://docs.velociraptor.app/docs/forensic/volatile/</loc><lastmod>2021-06-27T04:35:23+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/training/</loc><lastmod>2021-06-12T14:03:59+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/presentations/2023_auscert/</loc></url><url><loc>https://docs.velociraptor.app/docs/deployment/troubleshooting/</loc></url><url><loc>https://docs.velociraptor.app/presentations/2023_velocon/</loc></url><url><loc>https://docs.velociraptor.app/blog/</loc><lastmod>2023-07-27T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/docs/deployment/references/</loc></url><url><loc>https://docs.velociraptor.app/presentations/</loc></url><url><loc>https://docs.velociraptor.app/exchange/</loc><lastmod>2021-06-12T14:03:59+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/artifact_references/</loc><lastmod>2021-06-12T14:03:59+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/</loc></url><url><loc>https://docs.velociraptor.app/rss/</loc></url><url><loc>https://docs.velociraptor.app/search/</loc><lastmod>2021-06-12T06:14:26+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/random/</loc><lastmod>2023-08-09T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/random/</loc><lastmod>2023-08-09T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/</loc><lastmod>2023-08-09T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/vql/</loc><lastmod>2023-08-09T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/release/</loc><lastmod>2023-07-27T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2023/2023-07-27-release-notes-0.7.0/</loc><lastmod>2023-07-27T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/archiving/</loc><lastmod>2023-07-24T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/deployment/</loc><lastmod>2023-07-24T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/clone_organization_to_other_server/</loc><lastmod>2023-07-24T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/orgs/</loc><lastmod>2023-07-24T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/configuration/</loc><lastmod>2023-05-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2023/2023-05-05-release-notes-0.6.9/</loc><lastmod>2023-05-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/plugin_not_found/</loc><lastmod>2023-05-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2023/2023-04-05-qakbot/</loc><lastmod>2023-04-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/detection/</loc><lastmod>2023-04-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/malware/</loc><lastmod>2023-04-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/qakbot/</loc><lastmod>2023-04-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/qbot/</loc><lastmod>2023-04-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/community/</loc><lastmod>2023-04-01T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2023/2023-04-03-velociraptor-survey/</loc><lastmod>2023-04-01T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/containment/</loc><lastmod>2023-03-04T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/quarantine/</loc><lastmod>2023-03-04T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/quarantine/</loc><lastmod>2023-03-04T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2023/2023-02-13-release-notes-0.6.8/</loc><lastmod>2023-02-13T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2023/2023-01-13-tracking-an-adversary-in-realtime/</loc><lastmod>2023-01-09T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-11-21-release-notes/</loc><lastmod>2022-11-19T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/decimal/</loc><lastmod>2022-11-02T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/decode/</loc><lastmod>2022-11-02T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/decimaldecode/</loc><lastmod>2022-11-02T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/collector/</loc><lastmod>2022-10-10T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/automate_offline_collector/</loc><lastmod>2022-10-10T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/retry_hunt/</loc><lastmod>2022-09-10T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/hunt_by_label/</loc><lastmod>2022-09-10T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/hunting/</loc><lastmod>2022-09-10T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/labels/</loc><lastmod>2022-09-10T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-08-17-process-tracker/</loc><lastmod>2022-09-07T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-08-15-release-notes/</loc><lastmod>2022-09-07T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/getting_latest_release/</loc><lastmod>2022-09-03T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/forensics/</loc><lastmod>2022-08-03T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/notebook/</loc><lastmod>2022-08-03T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-08-04-post-processing/</loc><lastmod>2022-08-03T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-06-21-release-notes/</loc><lastmod>2022-06-21T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/encode/</loc><lastmod>2022-06-06T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/urldecode/</loc><lastmod>2022-06-06T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/url/</loc><lastmod>2022-06-06T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/multiparts_uploads/</loc><lastmod>2022-05-21T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/huntlabel/</loc><lastmod>2022-05-20T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/reconfigure_offline_collector/</loc><lastmod>2022-05-06T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/gui/</loc><lastmod>2022-04-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/merging_config/</loc><lastmod>2022-04-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/favorites/</loc><lastmod>2022-04-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/rolling_certificates/</loc><lastmod>2022-04-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/glibc_errors/</loc><lastmod>2022-04-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/startup_artifacts/</loc><lastmod>2022-04-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/registry_finder/</loc><lastmod>2022-04-25T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/searching/</loc><lastmod>2022-04-25T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-03-23-release-notes/</loc><lastmod>2022-04-21T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/ssl/</loc><lastmod>2022-04-18T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/proxy/</loc><lastmod>2022-04-15T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/notebook_timeout/</loc><lastmod>2022-03-29T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/admin/</loc><lastmod>2022-03-27T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/upgrading/</loc><lastmod>2022-03-27T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/identifier_with_space/</loc><lastmod>2022-03-27T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/automation/</loc><lastmod>2022-03-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/automating_labels/</loc><lastmod>2022-03-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/multiple_oauth/</loc><lastmod>2022-03-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/sso/</loc><lastmod>2022-03-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/debugging/</loc><lastmod>2022-03-21T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/debugging_clients/</loc><lastmod>2022-03-21T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/deploying_in_agentless_mode/</loc><lastmod>2022-03-21T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-03-22-deaddisk/</loc><lastmod>2022-03-20T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-03-21-paths/</loc><lastmod>2022-03-20T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/asep/</loc><lastmod>2022-01-12T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/etw/</loc><lastmod>2022-01-12T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/t1546.003/</loc><lastmod>2022-01-12T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/wmi/</loc><lastmod>2022-01-12T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-01-12-wmi-eventing/</loc><lastmod>2022-01-12T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/linux/</loc><lastmod>2022-01-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-01-05-searching-for-files-on-linux/</loc><lastmod>2022-01-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2022/2022-01-05-release-notes-0.6.3/</loc><lastmod>2022-01-05T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/aws/</loc><lastmod>2021-12-20T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/offline-collector/</loc><lastmod>2021-12-20T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-12-11-sftp-in-aws/</loc><lastmod>2021-12-20T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/cobalt-strike/</loc><lastmod>2021-11-09T04:54:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-11-09-eql2vql/</loc><lastmod>2021-11-09T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-10-22-a-closer-look-at-the-winning-entry-in-the-2021-velociraptor-contributor-competition-575c387610af/</loc><lastmod>2021-10-20T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-10-08-contributor-contest/</loc><lastmod>2021-10-12T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-09-17-carlos-intro/</loc><lastmod>2021-09-17T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-09-07-release-notes-0.6.1/</loc><lastmod>2021-09-06T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-09-03-process-spoofing/</loc><lastmod>2021-09-03T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-08-18-velociraptor-and-etw/</loc><lastmod>2021-09-02T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/carving/</loc><lastmod>2021-06-16T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/</loc><lastmod>2021-06-16T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/usn/</loc><lastmod>2021-06-16T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/windows/</loc><lastmod>2021-06-16T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/parsing/</loc><lastmod>2021-06-09T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/security/</loc><lastmod>2021-06-09T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-06-09-verifying-executables-on-windows-1b3518122d3c/</loc><lastmod>2021-06-09T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/scalability/</loc><lastmod>2021-04-29T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-04-29-scaling-velociraptor-57acc4df76ed/</loc><lastmod>2021-04-29T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/server/</loc><lastmod>2021-04-29T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/velociraptor/</loc><lastmod>2021-04-29T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-04-21-the-next-phase-of-velociraptor-bf696c2c3491/</loc><lastmod>2021-04-21T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-04-16-digging-into-process-memory-33c60a640cdb/</loc><lastmod>2021-04-16T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/memory/</loc><lastmod>2021-04-16T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-02-13-digging-for-files-with-velociraptor-a1c0a21e242b/</loc><lastmod>2021-02-13T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/filesystems/</loc><lastmod>2021-02-13T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-02-03-migrating-from-osquery-to-velociraptor-d4143799953f/</loc><lastmod>2021-02-03T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/osquery/</loc><lastmod>2021-02-03T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-02-02-detecting-dll-hijacking-with-vql-e9a735354257/</loc><lastmod>2021-02-02T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-01-29-disabled-event-log-files-a3529a08adbe/</loc><lastmod>2021-01-29T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/logs/</loc><lastmod>2021-01-29T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-01-22-concurrent-vql-6d381fdb0b1f/</loc><lastmod>2021-01-22T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/performance/</loc><lastmod>2021-01-22T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2021/2021-01-19-parsing-binary-files-d31114a41f14/</loc><lastmod>2021-01-19T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/integration/</loc><lastmod>2020-12-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/slack/</loc><lastmod>2020-12-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-12-26-slack-and-velociraptor-b63803ba4b16/</loc><lastmod>2020-12-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-12-13-velociraptor-and-osquery-2a4306dd23c/</loc><lastmod>2020-12-13T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-11-13-the-windows-usn-journal-f0c55c9010e/</loc><lastmod>2020-11-12T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/internals/</loc><lastmod>2020-09-27T01:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-09-28-velociraptor-network-communications-30568624043a/</loc><lastmod>2020-09-27T01:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/authentication/</loc><lastmod>2020-08-16T01:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-08-17-velociraptor-sso-authentication-6dd68d46dccf/</loc><lastmod>2020-08-16T01:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-08-16-profiling-the-beast-58913437fd16/</loc><lastmod>2020-08-16T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-07-14-triage-with-velociraptor-pt-4-cf0e60810d1e/</loc><lastmod>2020-07-14T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/tools/</loc><lastmod>2020-07-13T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-07-13-velociraptor-in-the-tool-age-d896dfe71b9/</loc><lastmod>2020-07-13T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/tags/low-level/</loc><lastmod>2020-06-19T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-06-19-the-velociraptor-query-language-pt-2-fe92bb7aa150/</loc><lastmod>2020-06-19T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-06-14-the-velociraptor-query-language-pt-1-d721bff100bf/</loc><lastmod>2020-06-14T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-04-16-velociraptor-e48a47e0317d/</loc><lastmod>2020-04-16T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-03-29-velociraptors-acl-model-7f497575daee/</loc><lastmod>2020-03-29T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-03-28-velociraptor-notebooks-d02e0bd11230/</loc><lastmod>2020-03-28T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-03-07-extending-vql-plugins-7fb004cb6ec4/</loc><lastmod>2020-03-07T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-03-06-velociraptor-post-processing-with-jupyter-notebook-and-pandas-8a344d05ee8c/</loc><lastmod>2020-03-06T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2020/2020-01-12_hunting-malware-using-mutants-ea08e86dfc19/</loc><lastmod>2020-01-12T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/2019-12-31_digging-into-the-system-resource-usage-monitor-srum-afbadb1a375/</loc><lastmod>2019-12-31T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/2019-12-08-velociraptor-to-elasticsearch-3a9fc02c6568/</loc><lastmod>2019-12-08T23:50:52+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/2019-11-15_recovering-deleted-ntfs-files-with-velociraptor-1fcf09855311/</loc><lastmod>2019-11-15T00:38:44+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/2019-11-12_windows-event-logs-d8d8e615c9ca/</loc><lastmod>2019-11-12T10:40:24+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/2019-10-08_triage-with-velociraptor-pt-3-d6f63215f579/</loc><lastmod>2019-10-08T09:03:34+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/2019-10-04_triage-with-velociraptor-pt-2-d0f79066ca0e/</loc><lastmod>2019-10-04T23:50:52+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/2019-10-02_triage-with-velociraptor-pt-1-253f57ce96c0/</loc><lastmod>2019-10-02T13:32:39+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/2019-09-11_velociraptor-s-client-side-buffer-3ce03697a4e6/</loc><lastmod>2019-09-11T00:31:39+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/categories/blog/</loc><lastmod>2019-09-03T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/categories/</loc><lastmod>2019-09-03T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/09/03/velociraptor_s_client_communications/</loc><lastmod>2019-09-03T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2019/08/28/the_velociraptor_api/</loc><lastmod>2019-08-26T00:00:00+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/2019/2019-03-02/</loc><lastmod>2019-03-02T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2019/03/02/agentless_hunting_with_velociraptor/</loc><lastmod>2019-03-02T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2019/02/14/alerting_on_event_patterns/</loc><lastmod>2019-02-14T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2019/02/10/velociraptor_performance/</loc><lastmod>2019-02-10T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2019/02/09/velociraptor_python_api/</loc><lastmod>2019-02-09T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/12/23/deploying_velociraptor_with_oauth_sso/</loc><lastmod>2018-12-23T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/12/22/configuring_velociraptor_for_ssl/</loc><lastmod>2018-12-22T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/12/11/velociraptor_interactive_shell/</loc><lastmod>2018-12-11T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/12/10/server_side_vql_queries_and_events/</loc><lastmod>2018-12-10T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/12/09/more_on_client_event_collection/</loc><lastmod>2018-12-09T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/11/13/velociraptor_training_at_nzitf/</loc><lastmod>2018-11-13T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/11/09/event_queries_and_endpoint_monitoring/</loc><lastmod>2018-11-09T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/09/30/velorciraptor_s_filesystem_s_accessors/</loc><lastmod>2018-09-30T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/09/29/detecting_powershell_persistence_with_velociraptor_and_yara/</loc><lastmod>2018-09-29T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/09/03/velociraptor_walk_through_and_demo/</loc><lastmod>2018-09-03T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/08/20/velociraptor_artifacts/</loc><lastmod>2018-08-20T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/08/10/design_differences_between_velociraptor_and_grr/</loc><lastmod>2018-08-10T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/08/10/files_files_everything_is_just_a_file/</loc><lastmod>2018-08-10T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/08/10/hunting_what_velociraptors_do_best/</loc><lastmod>2018-08-10T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/08/10/interrogation_make_the_endpoint_tell_us_what_it_knows/</loc><lastmod>2018-08-10T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/08/10/the_velocidex_query_language/</loc><lastmod>2018-08-10T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/blog/html/2018/08/10/introducing_velociraptor/</loc><lastmod>2018-08-09T04:10:06+00:00</lastmod></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/automate_offline_collector/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/automating_labels/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/clone_organization_to_other_server/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/debugging_clients/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/decimaldecode/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/deploying_in_agentless_mode/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/favorites/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/getting_latest_release/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/glibc_errors/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/hunt_by_label/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/huntlabel/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/identifier_with_space/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/merging_config/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/multiparts_uploads/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/multiple_oauth/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/notebook_timeout/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/plugin_not_found/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/proxy/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/quarantine/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/random/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/reconfigure_offline_collector/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/registry_finder/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/retry_hunt/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/rolling_certificates/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/ssl/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/startup_artifacts/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/upgrading/</loc></url><url><loc>https://docs.velociraptor.app/knowledge_base/tips/urldecode/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/add_client_monitoring/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/add_server_monitoring/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/admin.client.remove/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/admin.client.uninstall/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/admin.client.upgrade/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/admin.events.postprocessuploads/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/admin.system.compressuploads/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/alert/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/powerpickhostversion/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/all/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/amsi/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/any/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/appcompatcache/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/array/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/artifact_definitions/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/artifact_delete/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/artifact_set/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/atexit/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/atoi/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/linux/audit/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/authenticode/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/base64decode/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/base64encode/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/base85decode/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/basename/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/batch/</loc></url><url><loc>https://docs.velociraptor.app/golang/binparsergen/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/cache/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/cancel_flow/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/certificates/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/chain/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/cidr_contains/</loc></url><url><loc>https://docs.velociraptor.app/tags/client-artifact/</loc></url><url><loc>https://docs.velociraptor.app/tags/client-event-artifact/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/client_create/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/client_delete/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/client_info/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/client_metadata/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/client_set_metadata/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/clients/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/clock/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/collect/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/collect_client/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/column_filter/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/combine/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/commandline_split/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/compress/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/connections/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/copy/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/count/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/create_flow_download/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/create_hunt_download/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/create_notebook_download/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/crypto_rc4/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/custom.linux.sudousers/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.nirsoft.lastactivityview/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.services.hijacking/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/delay/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/delete_events/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/delete_flow/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/demo.plugins.fifo/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/demo.plugins.gui/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/detection.application.cursedchrome/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/dict/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/diff/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/dirname/</loc></url><url><loc>https://docs.velociraptor.app/discord/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/dns/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/efivariables/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/elastic_upload/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/elastic.events.clients/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/elastic.events.upload/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/elastic.flows.upload/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/encode/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/entropy/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/enumerate/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/enumerate_flow/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/environ/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/environ/</loc></url><url><loc>https://docs.velociraptor.app/tags/event/</loc></url><url><loc>https://docs.velociraptor.app/golang/evtx/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/exchange.label.user/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.kunai/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/exchange.server.enrichment.gimphash/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/execve/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/expand/</loc></url><url><loc>https://docs.velociraptor.app/tags/exploit/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/favorites_delete/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/favorites_save/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/fifo/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/file_store/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/file_store_delete/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/filesystems/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/filter/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/flatten/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/flow_logs/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/flow_results/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/flows/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/for/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/foreach/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/format/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/gcs_pubsub_publish/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/generate/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.applications.chrome.sessionstorage/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.applications.office.keywords/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.client.diskspace/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.client.info/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.client.profile/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.client.rekey/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.client.stats/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.client.trace/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.client.vql/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/generic.collection.uac/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.collectors.file/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.collectors.sqlecmd/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.detection.hashhunter/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/log4jrce/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/log4jvulnhunter/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/generic.detection.lunaseclog4shell/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/manageenginelog/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.detection.yara.glob/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.detection.yara.zip/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.forensic.carving.urls/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.forensic.hashlookup/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.forensic.localhashes.glob/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.forensic.localhashes.init/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.forensic.localhashes.query/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.forensic.sqlitehunter/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.forensic.timeline/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/generic.forensics.cylr/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.network.interfaceaddresses/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.system.efisignatures/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.system.hostsfile/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.system.processsiblings/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.system.pstree/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/generic.utils.fetchbinary/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/geoip/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/get/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/get_client_monitoring/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/get_flow/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/get_server_monitoring/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/getpid/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/glob/</loc></url><url><loc>https://docs.velociraptor.app/golang/go-ese/</loc></url><url><loc>https://docs.velociraptor.app/golang/go-yara/</loc></url><url><loc>https://docs.velociraptor.app/golang/go-ntfs/</loc></url><url><loc>https://docs.velociraptor.app/golang/go-pe/</loc></url><url><loc>https://docs.velociraptor.app/golang/go-prefetch/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/grep/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/grok/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/gui_users/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/gunzip/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/handles/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/hash/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/hash_run_keys/</loc></url><url><loc>https://docs.velociraptor.app/tags/hijacking/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/http_client/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/humanize/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/hunt/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/hunt_add/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/hunt_delete/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/hunt_flows/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/hunt_results/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/hunt_update/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/hunts/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/if/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/if/</loc></url><url><loc>https://docs.velociraptor.app/tags/impacket/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/import_collection/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/info/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/int/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/interfaces/</loc></url><url><loc>https://docs.velociraptor.app/tags/internal-artifact/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/inventory/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/inventory_add/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/inventory_get/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/ip/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/ipcheck.virustotal/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/iris.sync.asset/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/iris.timeline.add/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/items/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/join/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/experimental/js/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/experimental/js_call/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/js_get/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/js_set/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/killkillkill/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/label/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/label.domaincontroller/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/len/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/leveldb/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.applications.chrome.extensions/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.applications.chrome.extensions.upload/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.applications.docker.info/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.applications.docker.version/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.applications.wgethsts/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.carving.sshlogs/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.autoruns/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.browserextensions/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.browserhistory/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.catscale/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.dbconfig/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.historyfiles/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.networkconfig/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.sysconfig/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.syslogs/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.collection.userconfig/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.debian.aptsources/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.debian.gpgkeys/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.debian.packages/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.detection.anomalousfiles/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/confluencelogs/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.detection.cve20214034/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.detection.incorrectpermissions/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.detection.memfd/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.detection.sshkeyfilecmd/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.detection.vrealizeloginsightexploitation/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.detection.yara.process/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.events.processexecutions/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.events.sshbruteforce/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.events.sshlogin/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.forensics.journal/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.forensics.recentlyused/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.kapefiles.collectfromdirectory/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.loganalysis.chopchopgo/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linuxmemoryacquisition/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.memory.avml/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.mounts/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.network.netstat/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.network.netstat/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.network.netstatenriched/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.network.nm.connections/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.network.packetcapture/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.osquery.generic/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.privilegeescalationdetection/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.proc.arp/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.proc.modules/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.remediation.quarantine/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.remediation.quarantine/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.rhel.packages/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.search.filefinder/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.ssh.authorizedkeys/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.ssh.knownhosts/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.ssh.privatekeys/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.suse.packages/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.acpitables/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.sys.apthistory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.bashhistory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.bashshell/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.cputime/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.crontab/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.sys.journalctl/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.lastuserlogin/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.loghunter/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.maps/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.pslist/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.services/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.suid/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.sys.systemdtimer/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.sys.users/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.sysinternals.sysmon/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.sysinternals.sysmonevent/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.syslog.sshlogin/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.system.bashlogout/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/linux.system.pam/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.triage.processmemory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.users.interactiveusers/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/linux.users.rootusers/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/volatility_profile/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/log/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/logging/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/logscale_upload/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/logscale.events.clients/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/logscale.flows.upload/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/lookupsid/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/lowcase/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/lru/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/lzxpress_decompress/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.applications.cache/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.applications.chrome.history/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.applications.firefox.history/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.applications.knowledgec/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.applications.mru/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.applications.networkusage/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.applications.notes/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.applications.safari.downloads/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.applications.safari.history/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.applications.savedstate/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.collection.aftermath/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.detection.autoruns/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.detection.installhistory/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.files.filemonitor/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.forensics.appledoublezip/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.forensics.fsevents/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.forensics.fsevents/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/knockknock/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.logs.macmonitor/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.network.applicationlayerfirewall/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.network.bluetooth/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.network.dhcp/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.network.littlesnitch/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.network.packetcapture/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.network.recentwifinetworks/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.osquery.generic/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.parallelsvm.suspendedmemory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.search.filefinder/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.sys.automator/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.sys.bashhistory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.system.dock/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.system.locationservices/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.system.man/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.system.mounteddiskimages/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.system.packages/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.system.plist/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.system.quarantineevents/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.system.tcc/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.system.timemachine/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.system.users/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/macos.system.wifi/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.unifiedloghunter/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macos.unifiedlogparser/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/magic/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/mail/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/mail/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/max/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/memoize/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/min/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/mock_clear/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/mock_replay/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/modules/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/monitoring/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/monitoring_logs/</loc></url><url><loc>https://docs.velociraptor.app/docs/deployment/cloud/multifrontend/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/netcat/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/netstat/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/netstat/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/network.externalipaddress/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/notebook_delete/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/now/</loc></url><url><loc>https://docs.velociraptor.app/golang/oleparse/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/olevba/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/org/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/org_create/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/org_delete/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/orgs/</loc></url><url><loc>https://docs.velociraptor.app/golang/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/parallelize/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_auditd/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_binary/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_csv/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_ese/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_ese_catalog/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_evtx/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_float/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_json/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_json_array/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_jsonl/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_lines/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_mft/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_ntfs/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_ntfs_i30/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_ntfs_ranges/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_pe/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_pkcs7/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_records_with_regex/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_recyclebin/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_string_with_regex/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_usn/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_x509/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_xml/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/parse_yaml/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/partitions/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/passwd/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/patch/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/path_join/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/path_split/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/pathspec/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/pe_dump/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/pipe/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/pk_decrypt/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/pk_encrypt/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/plist/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/prefetch/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/proc_dump/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/proc_yara/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/process_tracker/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/process_tracker_all/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/process_tracker_callchain/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/process_tracker_children/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/process_tracker_get/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/process_tracker_pslist/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/process_tracker_tree/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/process_tracker_updates/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/profile/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/profile_goroutines/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/profile_memory/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/pskill/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/pslist/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/pslist.vtlookup/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/query/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/query/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/rand/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/range/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/rate/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/read_crypto_file/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/read_file/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/read_file/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/read_reg_key/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/reg_rm_key/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/reg_rm_value/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/reg_set_value/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/regex_replace/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/regex_transform/</loc></url><url><loc>https://docs.velociraptor.app/tags/registry/</loc></url><url><loc>https://docs.velociraptor.app/golang/regparser/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/rekey/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/relpath/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/remap/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/repack/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/reporting.default/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/reporting.hunts.details/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/rm/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/rm_client_monitoring/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/rm_server_monitoring/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/rot13/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/sample/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/scope/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/scope/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/send_event/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/experimental/sequence/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/serialize/</loc></url><url><loc>https://docs.velociraptor.app/tags/server-artifact/</loc></url><url><loc>https://docs.velociraptor.app/tags/server-event-artifact/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/server_frontend_cert/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/server_metadata/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/server_set_metadata/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/genericmonitor/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.alerts.iris.case.create/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.alerts.mattermost/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.alerts.monitor.iris/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.alerts.notification/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.alerts.processcreation/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.alerts.psexec/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.alerts.thehive.alert/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.alerts.thehive.case/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.alerts.trackaccount/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.alerts.winpmem/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/cyberchefserver/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.audit.logs/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.enrichment.cortexanalyzer/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.enrichment.echotrail/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.enrichment.geoip/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.enrichment.geoipisp/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.enrichment.greynoise/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.enrichment.hybridanalysis/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.enrichment.iris.ioclookup/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.enrichment.malwarebazaar/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.enrichment.openai/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.enrichment.strelka.filescan/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.enrichment.sublime.emailanalysis/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.enrichment.threatfox/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.enrichment.virustotal/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.enrichment.virustotal.filescan/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/findflows/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.hunts.addflow/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.hunts.cancelanddelete/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.hunts.list/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.hunts.results/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.import.artifactexchange/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.import.artifactexchange/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.import.deleteartifacts/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/detectraptor/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.import.previousreleases/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.import.watchlocaldirectory/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.import.watchs3directory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.information.clients/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.information.users/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.alerts/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.artifactdescription/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.artifactmodification/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.clientconflict/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.clientdelete/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.clientinfo/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.clientinfosnapshot/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.clientping/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.clienttasks/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.enrollment/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.frontendmetrics/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.huntmodification/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.huntupdate/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.interrogate/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.interrogation/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.inventory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.label/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.masterregistrations/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.metadatamodifications/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.notifications/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.ping/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.pong/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.tooldependencies/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.internal.welcome/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.monitor.autolabeling.clients/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.monitor.clientconflict/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.monitor.health/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.monitor.profile/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.monitor.shell/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.monitor.velometrics/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.monitoring.clientcount/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.monitoring.schedulehunt/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.notification.mastodon/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.notification.mattermost/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.orgs.listorgs/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.orgs.neworg/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.powershell.encodedcommand/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.slack.clients.enrolled/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.slack.clients.online/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.telegram.clients.enrolled/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.addtimeline/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.adduser/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.utils.backupazure/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.backupdirectory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.backupgcs/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.backups3/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.cancelhunt/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.collectclient/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.createcollector/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.createmsi/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.deleteclient/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/deleteclientlabel/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.deleteevents/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.deletefavoriteflow/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.deleteflow/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.deletemanyflows/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.deletemonitoringdata/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.deletenotebook/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.importcollection/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.listusers/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.utils.orphanedflows/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.utils.querysummary/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.reindex/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/server.utils.savefavoriteflow/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/server.utils.scheduleddeletion/</loc></url><url><loc>https://docs.velociraptor.app/tags/services/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/set/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/set_client_monitoring/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/set_server_monitoring/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/sigma/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/sigma_log_sources/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/sleep/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/slice/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/source/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/split/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/split_records/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/splunk_upload/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/splunk.events.clients/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/splunk.flows.upload/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/sql/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/sqlite/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/srum_lookup_id/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/starl/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/stat/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/str/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/strip/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/substr/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/sum/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/switch/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/sysinfo/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/system.flow.archive/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/system.flow.completion/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/system.hunt.archive/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/system.hunt.creation/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/system.hunt.participation/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/system.upload.completion/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/system.vfs.downloadfile/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/system.vfs.listdirectory/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/tempdir/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/tempfile/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/timeline/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/timeline_add/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/timestamp/</loc></url><url><loc>https://docs.velociraptor.app/golang/timetracker/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/tlsh_hash/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/to_dict/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/token/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/trace/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/triage.collection.upload/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/triage.collection.uploadtable/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/unhex/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/unzip/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/upcase/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/upload/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/upload_azure/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/upload_directory/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/upload_gcs/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/upload_s3/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/upload_sftp/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/upload_smb/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/upload_webdav/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/uploads/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/url/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/user/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/user_create/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/server/user_delete/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/user_grant/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/users/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/utf16/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/utf16_encode/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/uuid/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/vad/</loc></url><url><loc>https://docs.velociraptor.app/golang/velociraptor/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/basic/version/</loc></url><url><loc>https://docs.velociraptor.app/golang/vfilter/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/vfs_ls/</loc></url><url><loc>https://docs.velociraptor.app/tags/vmware/</loc></url><url><loc>https://docs.velociraptor.app/tags/vrealize/</loc></url><url><loc>https://docs.velociraptor.app/golang/vtypes/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/watch_auditd/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/watch_csv/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/watch_etw/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/watch_evtx/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/watch_monitoring/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/watch_syslog/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/watch_usn/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/whoami/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.activedirectory.bloodhound/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/activedirectoryprivilegedusers/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.analysis.capa/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.analysis.evidenceofdownload/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.analysis.evidenceofexecution/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/suspiciouswmiconsumers/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.application.firefox.downloads/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.applications.anydesk/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.applications.anydesk.logparser/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.chocolateypackages/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.chrome.cookies/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.chrome.extensions/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.chrome.history/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/cylance/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/defenderdhparser/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.applications.defenderhistory/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/defenderquarantineextract/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/diec/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.edge.favicons/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.edge.history/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.firefox.downloads/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.firefox.history/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.applications.freefilesync/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/ftkimager/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.applications.goodsync/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.iislogs/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/kace_sw_process/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.applications.lecmd/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.megasync/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.nirsoftbrowserviewer/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.officemacros/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/macroraptor/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/officeservercache/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.sbecmd/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.applications.teamviewer.incoming/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.attack.parentprocess/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.attack.prefetch/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.attack.unexpectedimagepath/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.attacksimulation.atomicredteam/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/exports/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/bulkfile/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/brc4/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/bumblebee/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.carving.cobaltstrike/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/qakbot/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/squirrelwaffle/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/systembc/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.carving.usn/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.carving.usnfiles/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.collectors.file/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.collectors.vss/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.amcache/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.binaryhunter/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.binaryrename/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.detection.bruteratel/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.cryptneturlcache/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.environmentvariables/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.forwardedimports/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/idatloader/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.impersonation/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.detection.isomount/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/magicweb/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/malfind/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/moveit/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/msdtfollina/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.mutants/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.detection.network.changed/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/ntdsutil/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/onenote/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.detection.pipehunter/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/prefetchhunter/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/printnightmare/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.processcreation/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/proxyhunter/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.detection.proxylogon.proxyshell/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.psexecservice/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.psexecservice.kill/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/publicip/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.registry/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/remoteiconforcedauth/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.detection.scmanagerbackdoor/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.service.upload/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/smoothoperator/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/sysaid/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/teamviewerlanguage/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.templateinjection/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/termsrv/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.thumbdrives.list/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.thumbdrives.officekeywords/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.thumbdrives.officemacros/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/unattendxml/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/usbyara/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.usn/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.wmiprocesscreation/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.detection.wonkavision/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/ws_ftp/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.yara.device/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.yara.ntfs/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.yara.physicalmemory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.detection.yara.process/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/yara.uefi/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/amsi/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.etw.detectprocessspoofing/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.etw.dns/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.etw.dnsofflinecollector/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.etw.dnsqueriesserver/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.etw.edgeurls/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.etw.etwsessions/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.etw.filecreation/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/powershellmonitoring/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.etw.registry/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.etw.viewsessions/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/wmieventing/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.etw.wmiprocesscreate/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.alternatelogon/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.aurora/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/bitsadmin/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.chainsaw/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.cleared/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/condensedaccountusage/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.dhcp/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.evtx/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.evtxhunter/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.evtxhussar/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.explicitlogon/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.hayabusa/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.kerbroasting/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.logonsessions/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.modifications/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/moveitevtx/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.powershellmodule/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.powershellscriptblock/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.rdpauth/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.rdpclientactivity/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/recordidcheck/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.remoteaccessvpn/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.rpcfirewall/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.scheduledtasks/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.servicecreationcomspec/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.symantec/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.eventlogs.telerik/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.wonkavision/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.eventlogs.zircolite/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.eventlogmodifications/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.events.eventlogmodifications/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.failedlogbeforesuccess/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.kerberoasting/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.kerbroasting/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.mutants/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.processcreation/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.servicecreation/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/sysmonarchivemonitor/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/sysmonregistry/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.trackaccount/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.trackprocesses/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.events.trackprocesses.useexistingsysmononly/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.events.trackprocessesbasic/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.bam/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.bulkextractor/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.certutil/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.forensics.clipboard/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.filenamesearch/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/filezilla/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.lnk/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.localhashes.usn/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.partitiontable/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.prefetch/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.processinfo/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.rdpcache/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.recentapps/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.forensics.recentfilecache/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.recyclebin/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.sam/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.shellbags/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.solarwindssunburst/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.srum/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.timeline/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.uefi/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/uefi/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/bootapplication/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.useraccesslogs/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.forensics.usn/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.generic.internet.blockaccess/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.kapefiles.extract/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.kapefiles.remapping/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.kapefiles.targets/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.memory.acquisition/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/hollowshunter/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/injectedthreadex/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.memory.intezer/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.memory.pedump/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.memory.processdump/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.memory.processinfo/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/custom.windows.mobaxterm.passwords/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/usbplugin/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/printnightmaremonitor/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.network.arpcache/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.network.interfaceaddresses/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.network.listeningports/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.network.netstat/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.network.netstatenriched/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.network.packetcapture/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.ntfs.adshunter/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.ntfs.extendedattributes/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.ntfs.i30/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.ntfs.mft/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.ntfs.mft.hivenightmare/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.ntfs.recover/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/timestomp/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.office.mru/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.osquery.generic/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.packs.lateralmovement/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.packs.persistence/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.persistence.debug/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.persistence.permanentwmievents/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.persistence.powershellprofile/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.persistence.powershellregistry/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/vscodetasks/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.persistence.wow64cpu/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.persistencesniper/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.appcompatcache/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/ateranetworks/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.backuprestore/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/backuprestore/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.registry.bulk.computername/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.registry.capabilityaccessmanager/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.registry.comautoapprovallist/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.registry.disabledcortexxdr/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/cve_2021_40444/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/defenderconfig/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.registry.domainname/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.enabledmacro/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.enableunsafeclientmailrules/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/hiddenusers/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/hvci/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.mountpoints2/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.registry.netshhelperdlls/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.ntuser/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.ntuser.upload/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.portproxy/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.registry.printnightmare/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.puttyhostkeys/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.rdp/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.recentdocs/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.sysinternals.eulacheck/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.registry.taskcache.hiddentasks/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.userassist/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.registry.wdigest/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/globremediation/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/killprocess/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/printspoolerremediation/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/processremediation/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.remediation.quarantine/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.remediation.quarantinemonitor/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/registryremediation/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.remediation.scheduledtasks/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.remediation.sinkhole/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.search.filefinder/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.search.smbfilefinder/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.search.vss/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.search.yara/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.allusers/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.appcompatshims/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.sys.bitlocker/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.certificateauthorities/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.diskinfo/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.drivers/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.firewallrules/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.interfaces/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.sys.loggedinusers/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.physicalmemoryranges/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.programs/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.startupitems/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sys.users/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sysinternals.autoruns/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/sysmonarchive/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sysinternals.sysmoninstall/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.sysinternals.sysmonlogforward/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.system.accesscontrollist/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.amcache/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.system.appcompatpca/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.auditpolicy/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/binaryversion/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.catfiles/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.cmdshell/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.criticalservices/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.dlls/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.dnscache/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.domainrole/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.handles/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.hostsfile/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.localadmins/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/powerefficiencydiagnostics/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.powershell/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/iseautosave/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.powershell.moduleanalysiscache/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.powershell.psreadline/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/printerdriver/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.pslist/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.rootcastore/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.services/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.system.services.sliverpsexec/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.shares/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.signers/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.svchost/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.taskscheduler/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.untrustedbinaries/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.vad/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.vbscript/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.system.windowserrorreporting/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.system.wmiproviders/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.system.wmiquery/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.timeline.mft/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.timeline.prefetch/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.timeline.prefetch.improved/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.timeline.registry.runmru/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/windows.triage.highvaluememory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.triage.processmemory/</loc></url><url><loc>https://docs.velociraptor.app/artifact_references/pages/windows.triage.sds/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/sysmontriage/</loc></url><url><loc>https://docs.velociraptor.app/exchange/artifacts/pages/custom.windows.winscp.passwords/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/winobj/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/windows/wmi/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/event/wmi_events/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/write_crypto_file/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/write_csv/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/misc/write_jsonl/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/parsers/xor/</loc></url><url><loc>https://docs.velociraptor.app/vql_reference/plugin/yara/</loc></url></urlset>
\ No newline at end of file
diff --git a/tags/admin/index.html b/tags/admin/index.html
index 34ea572701b..41112c12e68 100644
--- a/tags/admin/index.html
+++ b/tags/admin/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>admin :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/admin/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/admin/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>admin</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-admin</h1><ul><li><a href=/knowledge_base/tips/upgrading/>How do I upgrade my server and clients?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+admin</h1><ul><li><a href=/knowledge_base/tips/upgrading/>How do I upgrade my server and clients?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/archiving/index.html b/tags/archiving/index.html
index 2d03981479c..f3203a60e44 100644
--- a/tags/archiving/index.html
+++ b/tags/archiving/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>archiving :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/archiving/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/archiving/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>archiving</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-archiving</h1><ul><li><a href=/knowledge_base/tips/clone_organization_to_other_server/>How can I clone an organization with all its hunts and artifacts to another instance?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+archiving</h1><ul><li><a href=/knowledge_base/tips/clone_organization_to_other_server/>How can I clone an organization with all its hunts and artifacts to another instance?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/asep/index.html b/tags/asep/index.html
index fb671c0f930..e0122f3f5a3 100644
--- a/tags/asep/index.html
+++ b/tags/asep/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>ASEP :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/asep/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/asep/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>ASEP</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-ASEP</h1><ul><li><a href=/blog/2022/2022-01-12-wmi-eventing/>WMI Event Consumers: what are you missing?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+ASEP</h1><ul><li><a href=/blog/2022/2022-01-12-wmi-eventing/>WMI Event Consumers: what are you missing?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/authentication/index.html b/tags/authentication/index.html
index 0908f22b9ff..a4b96e540d6 100644
--- a/tags/authentication/index.html
+++ b/tags/authentication/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Authentication :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/authentication/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/authentication/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Authentication</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Authentication</h1><ul><li><a href=/blog/2020/2020-08-17-velociraptor-sso-authentication-6dd68d46dccf/>Velociraptor SSO Authentication</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Authentication</h1><ul><li><a href=/blog/2020/2020-08-17-velociraptor-sso-authentication-6dd68d46dccf/>Velociraptor SSO Authentication</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/automation/index.html b/tags/automation/index.html
index 798e72f0f48..4e9c0165f43 100644
--- a/tags/automation/index.html
+++ b/tags/automation/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>automation :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/automation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/automation/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>automation</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-automation</h1><ul><li><a href=/knowledge_base/tips/automating_labels/>How can I automatically apply labels to clients?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+automation</h1><ul><li><a href=/knowledge_base/tips/automating_labels/>How can I automatically apply labels to clients?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/aws/index.html b/tags/aws/index.html
index 7677958111c..36a05e34df8 100644
--- a/tags/aws/index.html
+++ b/tags/aws/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>AWS :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/aws/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/aws/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>AWS</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-AWS</h1><ul><li><a href=/blog/2021/2021-12-11-sftp-in-aws/>SFTP in AWS</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+AWS</h1><ul><li><a href=/blog/2021/2021-12-11-sftp-in-aws/>SFTP in AWS</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/carving/index.html b/tags/carving/index.html
index fac2b191906..78a49250fd7 100644
--- a/tags/carving/index.html
+++ b/tags/carving/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Carving :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/carving/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/carving/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Carving</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Carving</h1><ul><li><a href=/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/>Carving $USN journal entries</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Carving</h1><ul><li><a href=/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/>Carving $USN journal entries</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/client-artifact/index.html b/tags/client-artifact/index.html
index 0c5f82a05d1..516583aa28e 100644
--- a/tags/client-artifact/index.html
+++ b/tags/client-artifact/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Client Artifact :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/client-artifact/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/client-artifact/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Client Artifact</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Client Artifact</h1><ul><li><a href=/artifact_references/pages/admin.client.uninstall/>Admin.Client.Uninstall</a></li><li><a href=/artifact_references/pages/admin.client.upgrade/>Admin.Client.Upgrade</a></li><li><a href=/artifact_references/pages/custom.linux.sudousers/>Custom.Linux.SudoUsers</a></li><li><a href=/artifact_references/pages/demo.plugins.gui/>Demo.Plugins.GUI</a></li><li><a href=/artifact_references/pages/generic.applications.chrome.sessionstorage/>Generic.Applications.Chrome.SessionStorage</a></li><li><a href=/artifact_references/pages/generic.applications.office.keywords/>Generic.Applications.Office.Keywords</a></li><li><a href=/artifact_references/pages/generic.client.diskspace/>Generic.Client.DiskSpace</a></li><li><a href=/artifact_references/pages/generic.client.info/>Generic.Client.Info</a></li><li><a href=/artifact_references/pages/generic.client.profile/>Generic.Client.Profile</a></li><li><a href=/artifact_references/pages/generic.client.rekey/>Generic.Client.Rekey</a></li><li><a href=/artifact_references/pages/generic.client.trace/>Generic.Client.Trace</a></li><li><a href=/artifact_references/pages/generic.client.vql/>Generic.Client.VQL</a></li><li><a href=/artifact_references/pages/generic.collectors.file/>Generic.Collectors.File</a></li><li><a href=/artifact_references/pages/generic.collectors.sqlecmd/>Generic.Collectors.SQLECmd</a></li><li><a href=/artifact_references/pages/generic.detection.hashhunter/>Generic.Detection.HashHunter</a></li><li><a href=/artifact_references/pages/generic.detection.yara.glob/>Generic.Detection.Yara.Glob</a></li><li><a href=/artifact_references/pages/generic.detection.yara.zip/>Generic.Detection.Yara.Zip</a></li><li><a href=/artifact_references/pages/generic.forensic.carving.urls/>Generic.Forensic.Carving.URLs</a></li><li><a href=/artifact_references/pages/generic.forensic.localhashes.glob/>Generic.Forensic.LocalHashes.Glob</a></li><li><a href=/artifact_references/pages/generic.forensic.localhashes.init/>Generic.Forensic.LocalHashes.Init</a></li><li><a href=/artifact_references/pages/generic.forensic.localhashes.query/>Generic.Forensic.LocalHashes.Query</a></li><li><a href=/artifact_references/pages/generic.forensic.sqlitehunter/>Generic.Forensic.SQLiteHunter</a></li><li><a href=/artifact_references/pages/generic.forensic.timeline/>Generic.Forensic.Timeline</a></li><li><a href=/artifact_references/pages/generic.network.interfaceaddresses/>Generic.Network.InterfaceAddresses</a></li><li><a href=/artifact_references/pages/generic.system.efisignatures/>Generic.System.EfiSignatures</a></li><li><a href=/artifact_references/pages/generic.system.hostsfile/>Generic.System.HostsFile</a></li><li><a href=/artifact_references/pages/generic.system.processsiblings/>Generic.System.ProcessSiblings</a></li><li><a href=/artifact_references/pages/generic.system.pstree/>Generic.System.Pstree</a></li><li><a href=/artifact_references/pages/generic.utils.fetchbinary/>Generic.Utils.FetchBinary</a></li><li><a href=/artifact_references/pages/linux.applications.chrome.extensions/>Linux.Applications.Chrome.Extensions</a></li><li><a href=/artifact_references/pages/linux.applications.chrome.extensions.upload/>Linux.Applications.Chrome.Extensions.Upload</a></li><li><a href=/artifact_references/pages/linux.applications.docker.info/>Linux.Applications.Docker.Info</a></li><li><a href=/artifact_references/pages/linux.applications.docker.version/>Linux.Applications.Docker.Version</a></li><li><a href=/artifact_references/pages/linux.debian.aptsources/>Linux.Debian.AptSources</a></li><li><a href=/artifact_references/pages/linux.debian.packages/>Linux.Debian.Packages</a></li><li><a href=/artifact_references/pages/linux.detection.anomalousfiles/>Linux.Detection.AnomalousFiles</a></li><li><a href=/artifact_references/pages/linux.detection.yara.process/>Linux.Detection.Yara.Process</a></li><li><a href=/artifact_references/pages/linux.forensics.journal/>Linux.Forensics.Journal</a></li><li><a href=/artifact_references/pages/linux.kapefiles.collectfromdirectory/>Linux.KapeFiles.CollectFromDirectory</a></li><li><a href=/artifact_references/pages/linux.mounts/>Linux.Mounts</a></li><li><a href=/artifact_references/pages/linux.network.netstat/>Linux.Network.Netstat</a></li><li><a href=/artifact_references/pages/linux.network.netstatenriched/>Linux.Network.NetstatEnriched</a></li><li><a href=/artifact_references/pages/linux.network.packetcapture/>Linux.Network.PacketCapture</a></li><li><a href=/artifact_references/pages/linux.osquery.generic/>Linux.OSQuery.Generic</a></li><li><a href=/artifact_references/pages/linux.proc.arp/>Linux.Proc.Arp</a></li><li><a href=/artifact_references/pages/linux.proc.modules/>Linux.Proc.Modules</a></li><li><a href=/artifact_references/pages/linux.remediation.quarantine/>Linux.Remediation.Quarantine</a></li><li><a href=/artifact_references/pages/linux.rhel.packages/>Linux.RHEL.Packages</a></li><li><a href=/artifact_references/pages/linux.search.filefinder/>Linux.Search.FileFinder</a></li><li><a href=/artifact_references/pages/linux.ssh.authorizedkeys/>Linux.Ssh.AuthorizedKeys</a></li><li><a href=/artifact_references/pages/linux.ssh.knownhosts/>Linux.Ssh.KnownHosts</a></li><li><a href=/artifact_references/pages/linux.ssh.privatekeys/>Linux.Ssh.PrivateKeys</a></li><li><a href=/artifact_references/pages/linux.suse.packages/>Linux.SuSE.Packages</a></li><li><a href=/artifact_references/pages/linux.sys.acpitables/>Linux.Sys.ACPITables</a></li><li><a href=/artifact_references/pages/linux.sys.bashhistory/>Linux.Sys.BashHistory</a></li><li><a href=/artifact_references/pages/linux.sys.bashshell/>Linux.Sys.BashShell</a></li><li><a href=/artifact_references/pages/linux.sys.cputime/>Linux.Sys.CPUTime</a></li><li><a href=/artifact_references/pages/linux.sys.crontab/>Linux.Sys.Crontab</a></li><li><a href=/artifact_references/pages/linux.sys.lastuserlogin/>Linux.Sys.LastUserLogin</a></li><li><a href=/artifact_references/pages/linux.sys.loghunter/>Linux.Sys.LogHunter</a></li><li><a href=/artifact_references/pages/linux.sys.maps/>Linux.Sys.Maps</a></li><li><a href=/artifact_references/pages/linux.sys.pslist/>Linux.Sys.Pslist</a></li><li><a href=/artifact_references/pages/linux.sys.services/>Linux.Sys.Services</a></li><li><a href=/artifact_references/pages/linux.sys.suid/>Linux.Sys.SUID</a></li><li><a href=/artifact_references/pages/linux.sys.users/>Linux.Sys.Users</a></li><li><a href=/artifact_references/pages/linux.syslog.sshlogin/>Linux.Syslog.SSHLogin</a></li><li><a href=/artifact_references/pages/linux.triage.processmemory/>Linux.Triage.ProcessMemory</a></li><li><a href=/artifact_references/pages/linux.users.interactiveusers/>Linux.Users.InteractiveUsers</a></li><li><a href=/artifact_references/pages/linux.users.rootusers/>Linux.Users.RootUsers</a></li><li><a href=/artifact_references/pages/macos.applications.chrome.history/>MacOS.Applications.Chrome.History</a></li><li><a href=/artifact_references/pages/macos.applications.mru/>MacOS.Applications.MRU</a></li><li><a href=/artifact_references/pages/macos.detection.autoruns/>MacOS.Detection.Autoruns</a></li><li><a href=/artifact_references/pages/macos.detection.installhistory/>MacOS.Detection.InstallHistory</a></li><li><a href=/artifact_references/pages/macos.forensics.appledoublezip/>MacOS.Forensics.AppleDoubleZip</a></li><li><a href=/artifact_references/pages/macos.forensics.fsevents/>MacOS.Forensics.FSEvents</a></li><li><a href=/artifact_references/pages/macos.network.packetcapture/>MacOS.Network.PacketCapture</a></li><li><a href=/artifact_references/pages/macos.osquery.generic/>MacOS.OSQuery.Generic</a></li><li><a href=/artifact_references/pages/macos.search.filefinder/>MacOS.Search.FileFinder</a></li><li><a href=/artifact_references/pages/macos.system.dock/>MacOS.System.Dock</a></li><li><a href=/artifact_references/pages/macos.system.packages/>MacOS.System.Packages</a></li><li><a href=/artifact_references/pages/macos.system.plist/>MacOS.System.Plist</a></li><li><a href=/artifact_references/pages/macos.system.quarantineevents/>MacOS.System.QuarantineEvents</a></li><li><a href=/artifact_references/pages/macos.system.tcc/>MacOS.System.TCC</a></li><li><a href=/artifact_references/pages/macos.system.timemachine/>MacOS.System.TimeMachine</a></li><li><a href=/artifact_references/pages/macos.system.users/>MacOS.System.Users</a></li><li><a href=/artifact_references/pages/macos.system.wifi/>MacOS.System.Wifi</a></li><li><a href=/artifact_references/pages/network.externalipaddress/>Network.ExternalIpAddress</a></li><li><a href=/artifact_references/pages/server.enrichment.geoip/>Server.Enrichment.GeoIP</a></li><li><a href=/artifact_references/pages/server.enrichment.geoipisp/>Server.Enrichment.GeoIPISP</a></li><li><a href=/artifact_references/pages/server.internal.tooldependencies/>Server.Internal.ToolDependencies</a></li><li><a href=/artifact_references/pages/server.utils.deletefavoriteflow/>Server.Utils.DeleteFavoriteFlow</a></li><li><a href=/artifact_references/pages/server.utils.reindex/>Server.Utils.ReIndex</a></li><li><a href=/artifact_references/pages/server.utils.savefavoriteflow/>Server.Utils.SaveFavoriteFlow</a></li><li><a href=/artifact_references/pages/system.vfs.downloadfile/>System.VFS.DownloadFile</a></li><li><a href=/artifact_references/pages/system.vfs.listdirectory/>System.VFS.ListDirectory</a></li><li><a href=/artifact_references/pages/triage.collection.upload/>Triage.Collection.Upload</a></li><li><a href=/artifact_references/pages/triage.collection.uploadtable/>Triage.Collection.UploadTable</a></li><li><a href=/artifact_references/pages/windows.activedirectory.bloodhound/>Windows.ActiveDirectory.BloodHound</a></li><li><a href=/artifact_references/pages/windows.analysis.evidenceofdownload/>Windows.Analysis.EvidenceOfDownload</a></li><li><a href=/artifact_references/pages/windows.analysis.evidenceofexecution/>Windows.Analysis.EvidenceOfExecution</a></li><li><a href=/artifact_references/pages/windows.application.firefox.downloads/>Windows.Application.Firefox.Downloads</a></li><li><a href=/artifact_references/pages/windows.applications.chocolateypackages/>Windows.Applications.ChocolateyPackages</a></li><li><a href=/artifact_references/pages/windows.applications.chrome.cookies/>Windows.Applications.Chrome.Cookies</a></li><li><a href=/artifact_references/pages/windows.applications.chrome.extensions/>Windows.Applications.Chrome.Extensions</a></li><li><a href=/artifact_references/pages/windows.applications.chrome.history/>Windows.Applications.Chrome.History</a></li><li><a href=/artifact_references/pages/windows.applications.edge.favicons/>Windows.Applications.Edge.Favicons</a></li><li><a href=/artifact_references/pages/windows.applications.edge.history/>Windows.Applications.Edge.History</a></li><li><a href=/artifact_references/pages/windows.applications.firefox.downloads/>Windows.Applications.Firefox.Downloads</a></li><li><a href=/artifact_references/pages/windows.applications.firefox.history/>Windows.Applications.Firefox.History</a></li><li><a href=/artifact_references/pages/windows.applications.iislogs/>Windows.Applications.IISLogs</a></li><li><a href=/artifact_references/pages/windows.applications.megasync/>Windows.Applications.MegaSync</a></li><li><a href=/artifact_references/pages/windows.applications.nirsoftbrowserviewer/>Windows.Applications.NirsoftBrowserViewer</a></li><li><a href=/artifact_references/pages/windows.applications.officemacros/>Windows.Applications.OfficeMacros</a></li><li><a href=/artifact_references/pages/windows.applications.sbecmd/>Windows.Applications.SBECmd</a></li><li><a href=/artifact_references/pages/windows.applications.teamviewer.incoming/>Windows.Applications.TeamViewer.Incoming</a></li><li><a href=/artifact_references/pages/windows.attack.parentprocess/>Windows.Attack.ParentProcess</a></li><li><a href=/artifact_references/pages/windows.attack.prefetch/>Windows.Attack.Prefetch</a></li><li><a href=/artifact_references/pages/windows.attack.unexpectedimagepath/>Windows.Attack.UnexpectedImagePath</a></li><li><a href=/artifact_references/pages/windows.carving.cobaltstrike/>Windows.Carving.CobaltStrike</a></li><li><a href=/artifact_references/pages/windows.carving.usn/>Windows.Carving.USN</a></li><li><a href=/artifact_references/pages/windows.carving.usnfiles/>Windows.Carving.USNFiles</a></li><li><a href=/artifact_references/pages/windows.collectors.file/>Windows.Collectors.File</a></li><li><a href=/artifact_references/pages/windows.collectors.vss/>Windows.Collectors.VSS</a></li><li><a href=/artifact_references/pages/windows.detection.amcache/>Windows.Detection.Amcache</a></li><li><a href=/artifact_references/pages/windows.detection.binaryhunter/>Windows.Detection.BinaryHunter</a></li><li><a href=/artifact_references/pages/windows.detection.binaryrename/>Windows.Detection.BinaryRename</a></li><li><a href=/artifact_references/pages/windows.detection.cryptneturlcache/>Windows.Detection.CryptnetUrlCache</a></li><li><a href=/artifact_references/pages/windows.detection.environmentvariables/>Windows.Detection.EnvironmentVariables</a></li><li><a href=/artifact_references/pages/windows.detection.forwardedimports/>Windows.Detection.ForwardedImports</a></li><li><a href=/artifact_references/pages/windows.detection.impersonation/>Windows.Detection.Impersonation</a></li><li><a href=/artifact_references/pages/windows.detection.mutants/>Windows.Detection.Mutants</a></li><li><a href=/artifact_references/pages/windows.detection.templateinjection/>Windows.Detection.TemplateInjection</a></li><li><a href=/artifact_references/pages/windows.detection.yara.device/>Windows.Detection.Yara.Device</a></li><li><a href=/artifact_references/pages/windows.detection.yara.ntfs/>Windows.Detection.Yara.NTFS</a></li><li><a href=/artifact_references/pages/windows.detection.yara.physicalmemory/>Windows.Detection.Yara.PhysicalMemory</a></li><li><a href=/artifact_references/pages/windows.detection.yara.process/>Windows.Detection.Yara.Process</a></li><li><a href=/artifact_references/pages/windows.etw.viewsessions/>Windows.ETW.ViewSessions</a></li><li><a href=/artifact_references/pages/windows.eventlogs.alternatelogon/>Windows.EventLogs.AlternateLogon</a></li><li><a href=/artifact_references/pages/windows.eventlogs.cleared/>Windows.EventLogs.Cleared</a></li><li><a href=/artifact_references/pages/windows.eventlogs.dhcp/>Windows.EventLogs.DHCP</a></li><li><a href=/artifact_references/pages/windows.eventlogs.evtx/>Windows.EventLogs.Evtx</a></li><li><a href=/artifact_references/pages/windows.eventlogs.evtxhunter/>Windows.EventLogs.EvtxHunter</a></li><li><a href=/artifact_references/pages/windows.eventlogs.explicitlogon/>Windows.EventLogs.ExplicitLogon</a></li><li><a href=/artifact_references/pages/windows.eventlogs.kerbroasting/>Windows.EventLogs.Kerbroasting</a></li><li><a href=/artifact_references/pages/windows.eventlogs.modifications/>Windows.EventLogs.Modifications</a></li><li><a href=/artifact_references/pages/windows.eventlogs.powershellmodule/>Windows.EventLogs.PowershellModule</a></li><li><a href=/artifact_references/pages/windows.eventlogs.powershellscriptblock/>Windows.EventLogs.PowershellScriptblock</a></li><li><a href=/artifact_references/pages/windows.eventlogs.rdpauth/>Windows.EventLogs.RDPAuth</a></li><li><a href=/artifact_references/pages/windows.eventlogs.scheduledtasks/>Windows.EventLogs.ScheduledTasks</a></li><li><a href=/artifact_references/pages/windows.eventlogs.servicecreationcomspec/>Windows.EventLogs.ServiceCreationComspec</a></li><li><a href=/artifact_references/pages/windows.eventlogs.symantec/>Windows.EventLogs.Symantec</a></li><li><a href=/artifact_references/pages/windows.eventlogs.telerik/>Windows.EventLogs.Telerik</a></li><li><a href=/artifact_references/pages/windows.forensics.bam/>Windows.Forensics.Bam</a></li><li><a href=/artifact_references/pages/windows.forensics.bulkextractor/>Windows.Forensics.BulkExtractor</a></li><li><a href=/artifact_references/pages/windows.forensics.certutil/>Windows.Forensics.CertUtil</a></li><li><a href=/artifact_references/pages/windows.forensics.filenamesearch/>Windows.Forensics.FilenameSearch</a></li><li><a href=/artifact_references/pages/windows.forensics.lnk/>Windows.Forensics.Lnk</a></li><li><a href=/artifact_references/pages/windows.forensics.partitiontable/>Windows.Forensics.PartitionTable</a></li><li><a href=/artifact_references/pages/windows.forensics.prefetch/>Windows.Forensics.Prefetch</a></li><li><a href=/artifact_references/pages/windows.forensics.processinfo/>Windows.Forensics.ProcessInfo</a></li><li><a href=/artifact_references/pages/windows.forensics.rdpcache/>Windows.Forensics.RDPCache</a></li><li><a href=/artifact_references/pages/windows.forensics.recentapps/>Windows.Forensics.RecentApps</a></li><li><a href=/artifact_references/pages/windows.forensics.recyclebin/>Windows.Forensics.RecycleBin</a></li><li><a href=/artifact_references/pages/windows.forensics.sam/>Windows.Forensics.SAM</a></li><li><a href=/artifact_references/pages/windows.forensics.shellbags/>Windows.Forensics.Shellbags</a></li><li><a href=/artifact_references/pages/windows.forensics.solarwindssunburst/>Windows.Forensics.SolarwindsSunburst</a></li><li><a href=/artifact_references/pages/windows.forensics.srum/>Windows.Forensics.SRUM</a></li><li><a href=/artifact_references/pages/windows.forensics.timeline/>Windows.Forensics.Timeline</a></li><li><a href=/artifact_references/pages/windows.forensics.uefi/>Windows.Forensics.UEFI</a></li><li><a href=/artifact_references/pages/windows.forensics.useraccesslogs/>Windows.Forensics.UserAccessLogs</a></li><li><a href=/artifact_references/pages/windows.forensics.usn/>Windows.Forensics.Usn</a></li><li><a href=/artifact_references/pages/windows.kapefiles.targets/>Windows.KapeFiles.Targets</a></li><li><a href=/artifact_references/pages/windows.memory.acquisition/>Windows.Memory.Acquisition</a></li><li><a href=/artifact_references/pages/windows.memory.intezer/>Windows.Memory.Intezer</a></li><li><a href=/artifact_references/pages/windows.memory.pedump/>Windows.Memory.PEDump</a></li><li><a href=/artifact_references/pages/windows.memory.processdump/>Windows.Memory.ProcessDump</a></li><li><a href=/artifact_references/pages/windows.memory.processinfo/>Windows.Memory.ProcessInfo</a></li><li><a href=/artifact_references/pages/windows.network.arpcache/>Windows.Network.ArpCache</a></li><li><a href=/artifact_references/pages/windows.network.interfaceaddresses/>Windows.Network.InterfaceAddresses</a></li><li><a href=/artifact_references/pages/windows.network.listeningports/>Windows.Network.ListeningPorts</a></li><li><a href=/artifact_references/pages/windows.network.netstat/>Windows.Network.Netstat</a></li><li><a href=/artifact_references/pages/windows.network.netstatenriched/>Windows.Network.NetstatEnriched</a></li><li><a href=/artifact_references/pages/windows.network.packetcapture/>Windows.Network.PacketCapture</a></li><li><a href=/artifact_references/pages/windows.ntfs.adshunter/>Windows.NTFS.ADSHunter</a></li><li><a href=/artifact_references/pages/windows.ntfs.extendedattributes/>Windows.NTFS.ExtendedAttributes</a></li><li><a href=/artifact_references/pages/windows.ntfs.i30/>Windows.NTFS.I30</a></li><li><a href=/artifact_references/pages/windows.ntfs.mft/>Windows.NTFS.MFT</a></li><li><a href=/artifact_references/pages/windows.ntfs.recover/>Windows.NTFS.Recover</a></li><li><a href=/artifact_references/pages/windows.osquery.generic/>Windows.OSQuery.Generic</a></li><li><a href=/artifact_references/pages/windows.packs.lateralmovement/>Windows.Packs.LateralMovement</a></li><li><a href=/artifact_references/pages/windows.packs.persistence/>Windows.Packs.Persistence</a></li><li><a href=/artifact_references/pages/windows.persistence.debug/>Windows.Persistence.Debug</a></li><li><a href=/artifact_references/pages/windows.persistence.permanentwmievents/>Windows.Persistence.PermanentWMIEvents</a></li><li><a href=/artifact_references/pages/windows.persistence.powershellprofile/>Windows.Persistence.PowershellProfile</a></li><li><a href=/artifact_references/pages/windows.persistence.powershellregistry/>Windows.Persistence.PowershellRegistry</a></li><li><a href=/artifact_references/pages/windows.persistence.wow64cpu/>Windows.Persistence.Wow64cpu</a></li><li><a href=/artifact_references/pages/windows.registry.appcompatcache/>Windows.Registry.AppCompatCache</a></li><li><a href=/artifact_references/pages/windows.registry.backuprestore/>Windows.Registry.BackupRestore</a></li><li><a href=/artifact_references/pages/windows.registry.enabledmacro/>Windows.Registry.EnabledMacro</a></li><li><a href=/artifact_references/pages/windows.registry.enableunsafeclientmailrules/>Windows.Registry.EnableUnsafeClientMailRules</a></li><li><a href=/artifact_references/pages/windows.registry.mountpoints2/>Windows.Registry.MountPoints2</a></li><li><a href=/artifact_references/pages/windows.registry.ntuser/>Windows.Registry.NTUser</a></li><li><a href=/artifact_references/pages/windows.registry.ntuser.upload/>Windows.Registry.NTUser.Upload</a></li><li><a href=/artifact_references/pages/windows.registry.portproxy/>Windows.Registry.PortProxy</a></li><li><a href=/artifact_references/pages/windows.registry.puttyhostkeys/>Windows.Registry.PuttyHostKeys</a></li><li><a href=/artifact_references/pages/windows.registry.rdp/>Windows.Registry.RDP</a></li><li><a href=/artifact_references/pages/windows.registry.recentdocs/>Windows.Registry.RecentDocs</a></li><li><a href=/artifact_references/pages/windows.registry.sysinternals.eulacheck/>Windows.Registry.Sysinternals.Eulacheck</a></li><li><a href=/artifact_references/pages/windows.registry.userassist/>Windows.Registry.UserAssist</a></li><li><a href=/artifact_references/pages/windows.registry.wdigest/>Windows.Registry.WDigest</a></li><li><a href=/artifact_references/pages/windows.remediation.quarantine/>Windows.Remediation.Quarantine</a></li><li><a href=/artifact_references/pages/windows.remediation.scheduledtasks/>Windows.Remediation.ScheduledTasks</a></li><li><a href=/artifact_references/pages/windows.remediation.sinkhole/>Windows.Remediation.Sinkhole</a></li><li><a href=/artifact_references/pages/windows.search.filefinder/>Windows.Search.FileFinder</a></li><li><a href=/artifact_references/pages/windows.search.smbfilefinder/>Windows.Search.SMBFileFinder</a></li><li><a href=/artifact_references/pages/windows.search.vss/>Windows.Search.VSS</a></li><li><a href=/artifact_references/pages/windows.search.yara/>Windows.Search.Yara</a></li><li><a href=/artifact_references/pages/windows.sys.allusers/>Windows.Sys.AllUsers</a></li><li><a href=/artifact_references/pages/windows.sys.appcompatshims/>Windows.Sys.AppcompatShims</a></li><li><a href=/artifact_references/pages/windows.sys.certificateauthorities/>Windows.Sys.CertificateAuthorities</a></li><li><a href=/artifact_references/pages/windows.sys.diskinfo/>Windows.Sys.DiskInfo</a></li><li><a href=/artifact_references/pages/windows.sys.drivers/>Windows.Sys.Drivers</a></li><li><a href=/artifact_references/pages/windows.sys.firewallrules/>Windows.Sys.FirewallRules</a></li><li><a href=/artifact_references/pages/windows.sys.interfaces/>Windows.Sys.Interfaces</a></li><li><a href=/artifact_references/pages/windows.sys.physicalmemoryranges/>Windows.Sys.PhysicalMemoryRanges</a></li><li><a href=/artifact_references/pages/windows.sys.programs/>Windows.Sys.Programs</a></li><li><a href=/artifact_references/pages/windows.sys.startupitems/>Windows.Sys.StartupItems</a></li><li><a href=/artifact_references/pages/windows.sys.users/>Windows.Sys.Users</a></li><li><a href=/artifact_references/pages/windows.sysinternals.autoruns/>Windows.Sysinternals.Autoruns</a></li><li><a href=/artifact_references/pages/windows.sysinternals.sysmoninstall/>Windows.Sysinternals.SysmonInstall</a></li><li><a href=/artifact_references/pages/windows.system.amcache/>Windows.System.Amcache</a></li><li><a href=/artifact_references/pages/windows.system.auditpolicy/>Windows.System.AuditPolicy</a></li><li><a href=/artifact_references/pages/windows.system.catfiles/>Windows.System.CatFiles</a></li><li><a href=/artifact_references/pages/windows.system.cmdshell/>Windows.System.CmdShell</a></li><li><a href=/artifact_references/pages/windows.system.criticalservices/>Windows.System.CriticalServices</a></li><li><a href=/artifact_references/pages/windows.system.dlls/>Windows.System.DLLs</a></li><li><a href=/artifact_references/pages/windows.system.dnscache/>Windows.System.DNSCache</a></li><li><a href=/artifact_references/pages/windows.system.domainrole/>Windows.System.DomainRole</a></li><li><a href=/artifact_references/pages/windows.system.handles/>Windows.System.Handles</a></li><li><a href=/artifact_references/pages/windows.system.hostsfile/>Windows.System.HostsFile</a></li><li><a href=/artifact_references/pages/windows.system.localadmins/>Windows.System.LocalAdmins</a></li><li><a href=/artifact_references/pages/windows.system.powershell/>Windows.System.PowerShell</a></li><li><a href=/artifact_references/pages/windows.system.powershell.moduleanalysiscache/>Windows.System.Powershell.ModuleAnalysisCache</a></li><li><a href=/artifact_references/pages/windows.system.powershell.psreadline/>Windows.System.Powershell.PSReadline</a></li><li><a href=/artifact_references/pages/windows.system.pslist/>Windows.System.Pslist</a></li><li><a href=/artifact_references/pages/windows.system.rootcastore/>Windows.System.RootCAStore</a></li><li><a href=/artifact_references/pages/windows.system.services/>Windows.System.Services</a></li><li><a href=/artifact_references/pages/windows.system.shares/>Windows.System.Shares</a></li><li><a href=/artifact_references/pages/windows.system.signers/>Windows.System.Signers</a></li><li><a href=/artifact_references/pages/windows.system.svchost/>Windows.System.SVCHost</a></li><li><a href=/artifact_references/pages/windows.system.taskscheduler/>Windows.System.TaskScheduler</a></li><li><a href=/artifact_references/pages/windows.system.untrustedbinaries/>Windows.System.UntrustedBinaries</a></li><li><a href=/artifact_references/pages/windows.system.vad/>Windows.System.VAD</a></li><li><a href=/artifact_references/pages/windows.system.vbscript/>Windows.System.VBScript</a></li><li><a href=/artifact_references/pages/windows.system.wmiquery/>Windows.System.WMIQuery</a></li><li><a href=/artifact_references/pages/windows.timeline.mft/>Windows.Timeline.MFT</a></li><li><a href=/artifact_references/pages/windows.timeline.prefetch/>Windows.Timeline.Prefetch</a></li><li><a href=/artifact_references/pages/windows.timeline.registry.runmru/>Windows.Timeline.Registry.RunMRU</a></li><li><a href=/artifact_references/pages/windows.triage.processmemory/>Windows.Triage.ProcessMemory</a></li><li><a href=/artifact_references/pages/windows.triage.sds/>Windows.Triage.SDS</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Client Artifact</h1><ul><li><a href=/artifact_references/pages/admin.client.uninstall/>Admin.Client.Uninstall</a></li><li><a href=/artifact_references/pages/admin.client.upgrade/>Admin.Client.Upgrade</a></li><li><a href=/artifact_references/pages/custom.linux.sudousers/>Custom.Linux.SudoUsers</a></li><li><a href=/artifact_references/pages/demo.plugins.gui/>Demo.Plugins.GUI</a></li><li><a href=/artifact_references/pages/generic.applications.chrome.sessionstorage/>Generic.Applications.Chrome.SessionStorage</a></li><li><a href=/artifact_references/pages/generic.applications.office.keywords/>Generic.Applications.Office.Keywords</a></li><li><a href=/artifact_references/pages/generic.client.diskspace/>Generic.Client.DiskSpace</a></li><li><a href=/artifact_references/pages/generic.client.info/>Generic.Client.Info</a></li><li><a href=/artifact_references/pages/generic.client.profile/>Generic.Client.Profile</a></li><li><a href=/artifact_references/pages/generic.client.rekey/>Generic.Client.Rekey</a></li><li><a href=/artifact_references/pages/generic.client.trace/>Generic.Client.Trace</a></li><li><a href=/artifact_references/pages/generic.client.vql/>Generic.Client.VQL</a></li><li><a href=/artifact_references/pages/generic.collectors.file/>Generic.Collectors.File</a></li><li><a href=/artifact_references/pages/generic.collectors.sqlecmd/>Generic.Collectors.SQLECmd</a></li><li><a href=/artifact_references/pages/generic.detection.hashhunter/>Generic.Detection.HashHunter</a></li><li><a href=/artifact_references/pages/generic.detection.yara.glob/>Generic.Detection.Yara.Glob</a></li><li><a href=/artifact_references/pages/generic.detection.yara.zip/>Generic.Detection.Yara.Zip</a></li><li><a href=/artifact_references/pages/generic.forensic.carving.urls/>Generic.Forensic.Carving.URLs</a></li><li><a href=/artifact_references/pages/generic.forensic.localhashes.glob/>Generic.Forensic.LocalHashes.Glob</a></li><li><a href=/artifact_references/pages/generic.forensic.localhashes.init/>Generic.Forensic.LocalHashes.Init</a></li><li><a href=/artifact_references/pages/generic.forensic.localhashes.query/>Generic.Forensic.LocalHashes.Query</a></li><li><a href=/artifact_references/pages/generic.forensic.sqlitehunter/>Generic.Forensic.SQLiteHunter</a></li><li><a href=/artifact_references/pages/generic.forensic.timeline/>Generic.Forensic.Timeline</a></li><li><a href=/artifact_references/pages/generic.network.interfaceaddresses/>Generic.Network.InterfaceAddresses</a></li><li><a href=/artifact_references/pages/generic.system.efisignatures/>Generic.System.EfiSignatures</a></li><li><a href=/artifact_references/pages/generic.system.hostsfile/>Generic.System.HostsFile</a></li><li><a href=/artifact_references/pages/generic.system.processsiblings/>Generic.System.ProcessSiblings</a></li><li><a href=/artifact_references/pages/generic.system.pstree/>Generic.System.Pstree</a></li><li><a href=/artifact_references/pages/generic.utils.fetchbinary/>Generic.Utils.FetchBinary</a></li><li><a href=/artifact_references/pages/linux.applications.chrome.extensions/>Linux.Applications.Chrome.Extensions</a></li><li><a href=/artifact_references/pages/linux.applications.chrome.extensions.upload/>Linux.Applications.Chrome.Extensions.Upload</a></li><li><a href=/artifact_references/pages/linux.applications.docker.info/>Linux.Applications.Docker.Info</a></li><li><a href=/artifact_references/pages/linux.applications.docker.version/>Linux.Applications.Docker.Version</a></li><li><a href=/artifact_references/pages/linux.debian.aptsources/>Linux.Debian.AptSources</a></li><li><a href=/artifact_references/pages/linux.debian.packages/>Linux.Debian.Packages</a></li><li><a href=/artifact_references/pages/linux.detection.anomalousfiles/>Linux.Detection.AnomalousFiles</a></li><li><a href=/artifact_references/pages/linux.detection.yara.process/>Linux.Detection.Yara.Process</a></li><li><a href=/artifact_references/pages/linux.forensics.journal/>Linux.Forensics.Journal</a></li><li><a href=/artifact_references/pages/linux.kapefiles.collectfromdirectory/>Linux.KapeFiles.CollectFromDirectory</a></li><li><a href=/artifact_references/pages/linux.mounts/>Linux.Mounts</a></li><li><a href=/artifact_references/pages/linux.network.netstat/>Linux.Network.Netstat</a></li><li><a href=/artifact_references/pages/linux.network.netstatenriched/>Linux.Network.NetstatEnriched</a></li><li><a href=/artifact_references/pages/linux.network.packetcapture/>Linux.Network.PacketCapture</a></li><li><a href=/artifact_references/pages/linux.osquery.generic/>Linux.OSQuery.Generic</a></li><li><a href=/artifact_references/pages/linux.proc.arp/>Linux.Proc.Arp</a></li><li><a href=/artifact_references/pages/linux.proc.modules/>Linux.Proc.Modules</a></li><li><a href=/artifact_references/pages/linux.remediation.quarantine/>Linux.Remediation.Quarantine</a></li><li><a href=/artifact_references/pages/linux.rhel.packages/>Linux.RHEL.Packages</a></li><li><a href=/artifact_references/pages/linux.search.filefinder/>Linux.Search.FileFinder</a></li><li><a href=/artifact_references/pages/linux.ssh.authorizedkeys/>Linux.Ssh.AuthorizedKeys</a></li><li><a href=/artifact_references/pages/linux.ssh.knownhosts/>Linux.Ssh.KnownHosts</a></li><li><a href=/artifact_references/pages/linux.ssh.privatekeys/>Linux.Ssh.PrivateKeys</a></li><li><a href=/artifact_references/pages/linux.suse.packages/>Linux.SuSE.Packages</a></li><li><a href=/artifact_references/pages/linux.sys.acpitables/>Linux.Sys.ACPITables</a></li><li><a href=/artifact_references/pages/linux.sys.bashhistory/>Linux.Sys.BashHistory</a></li><li><a href=/artifact_references/pages/linux.sys.bashshell/>Linux.Sys.BashShell</a></li><li><a href=/artifact_references/pages/linux.sys.cputime/>Linux.Sys.CPUTime</a></li><li><a href=/artifact_references/pages/linux.sys.crontab/>Linux.Sys.Crontab</a></li><li><a href=/artifact_references/pages/linux.sys.lastuserlogin/>Linux.Sys.LastUserLogin</a></li><li><a href=/artifact_references/pages/linux.sys.loghunter/>Linux.Sys.LogHunter</a></li><li><a href=/artifact_references/pages/linux.sys.maps/>Linux.Sys.Maps</a></li><li><a href=/artifact_references/pages/linux.sys.pslist/>Linux.Sys.Pslist</a></li><li><a href=/artifact_references/pages/linux.sys.services/>Linux.Sys.Services</a></li><li><a href=/artifact_references/pages/linux.sys.suid/>Linux.Sys.SUID</a></li><li><a href=/artifact_references/pages/linux.sys.users/>Linux.Sys.Users</a></li><li><a href=/artifact_references/pages/linux.syslog.sshlogin/>Linux.Syslog.SSHLogin</a></li><li><a href=/artifact_references/pages/linux.triage.processmemory/>Linux.Triage.ProcessMemory</a></li><li><a href=/artifact_references/pages/linux.users.interactiveusers/>Linux.Users.InteractiveUsers</a></li><li><a href=/artifact_references/pages/linux.users.rootusers/>Linux.Users.RootUsers</a></li><li><a href=/artifact_references/pages/macos.applications.chrome.history/>MacOS.Applications.Chrome.History</a></li><li><a href=/artifact_references/pages/macos.applications.mru/>MacOS.Applications.MRU</a></li><li><a href=/artifact_references/pages/macos.detection.autoruns/>MacOS.Detection.Autoruns</a></li><li><a href=/artifact_references/pages/macos.detection.installhistory/>MacOS.Detection.InstallHistory</a></li><li><a href=/artifact_references/pages/macos.forensics.appledoublezip/>MacOS.Forensics.AppleDoubleZip</a></li><li><a href=/artifact_references/pages/macos.forensics.fsevents/>MacOS.Forensics.FSEvents</a></li><li><a href=/artifact_references/pages/macos.network.packetcapture/>MacOS.Network.PacketCapture</a></li><li><a href=/artifact_references/pages/macos.osquery.generic/>MacOS.OSQuery.Generic</a></li><li><a href=/artifact_references/pages/macos.search.filefinder/>MacOS.Search.FileFinder</a></li><li><a href=/artifact_references/pages/macos.system.dock/>MacOS.System.Dock</a></li><li><a href=/artifact_references/pages/macos.system.packages/>MacOS.System.Packages</a></li><li><a href=/artifact_references/pages/macos.system.plist/>MacOS.System.Plist</a></li><li><a href=/artifact_references/pages/macos.system.quarantineevents/>MacOS.System.QuarantineEvents</a></li><li><a href=/artifact_references/pages/macos.system.tcc/>MacOS.System.TCC</a></li><li><a href=/artifact_references/pages/macos.system.timemachine/>MacOS.System.TimeMachine</a></li><li><a href=/artifact_references/pages/macos.system.users/>MacOS.System.Users</a></li><li><a href=/artifact_references/pages/macos.system.wifi/>MacOS.System.Wifi</a></li><li><a href=/artifact_references/pages/network.externalipaddress/>Network.ExternalIpAddress</a></li><li><a href=/artifact_references/pages/server.enrichment.geoip/>Server.Enrichment.GeoIP</a></li><li><a href=/artifact_references/pages/server.enrichment.geoipisp/>Server.Enrichment.GeoIPISP</a></li><li><a href=/artifact_references/pages/server.internal.tooldependencies/>Server.Internal.ToolDependencies</a></li><li><a href=/artifact_references/pages/server.utils.deletefavoriteflow/>Server.Utils.DeleteFavoriteFlow</a></li><li><a href=/artifact_references/pages/server.utils.reindex/>Server.Utils.ReIndex</a></li><li><a href=/artifact_references/pages/server.utils.savefavoriteflow/>Server.Utils.SaveFavoriteFlow</a></li><li><a href=/artifact_references/pages/system.vfs.downloadfile/>System.VFS.DownloadFile</a></li><li><a href=/artifact_references/pages/system.vfs.listdirectory/>System.VFS.ListDirectory</a></li><li><a href=/artifact_references/pages/triage.collection.upload/>Triage.Collection.Upload</a></li><li><a href=/artifact_references/pages/triage.collection.uploadtable/>Triage.Collection.UploadTable</a></li><li><a href=/artifact_references/pages/windows.activedirectory.bloodhound/>Windows.ActiveDirectory.BloodHound</a></li><li><a href=/artifact_references/pages/windows.analysis.evidenceofdownload/>Windows.Analysis.EvidenceOfDownload</a></li><li><a href=/artifact_references/pages/windows.analysis.evidenceofexecution/>Windows.Analysis.EvidenceOfExecution</a></li><li><a href=/artifact_references/pages/windows.application.firefox.downloads/>Windows.Application.Firefox.Downloads</a></li><li><a href=/artifact_references/pages/windows.applications.chocolateypackages/>Windows.Applications.ChocolateyPackages</a></li><li><a href=/artifact_references/pages/windows.applications.chrome.cookies/>Windows.Applications.Chrome.Cookies</a></li><li><a href=/artifact_references/pages/windows.applications.chrome.extensions/>Windows.Applications.Chrome.Extensions</a></li><li><a href=/artifact_references/pages/windows.applications.chrome.history/>Windows.Applications.Chrome.History</a></li><li><a href=/artifact_references/pages/windows.applications.edge.favicons/>Windows.Applications.Edge.Favicons</a></li><li><a href=/artifact_references/pages/windows.applications.edge.history/>Windows.Applications.Edge.History</a></li><li><a href=/artifact_references/pages/windows.applications.firefox.downloads/>Windows.Applications.Firefox.Downloads</a></li><li><a href=/artifact_references/pages/windows.applications.firefox.history/>Windows.Applications.Firefox.History</a></li><li><a href=/artifact_references/pages/windows.applications.iislogs/>Windows.Applications.IISLogs</a></li><li><a href=/artifact_references/pages/windows.applications.megasync/>Windows.Applications.MegaSync</a></li><li><a href=/artifact_references/pages/windows.applications.nirsoftbrowserviewer/>Windows.Applications.NirsoftBrowserViewer</a></li><li><a href=/artifact_references/pages/windows.applications.officemacros/>Windows.Applications.OfficeMacros</a></li><li><a href=/artifact_references/pages/windows.applications.sbecmd/>Windows.Applications.SBECmd</a></li><li><a href=/artifact_references/pages/windows.applications.teamviewer.incoming/>Windows.Applications.TeamViewer.Incoming</a></li><li><a href=/artifact_references/pages/windows.attack.parentprocess/>Windows.Attack.ParentProcess</a></li><li><a href=/artifact_references/pages/windows.attack.prefetch/>Windows.Attack.Prefetch</a></li><li><a href=/artifact_references/pages/windows.attack.unexpectedimagepath/>Windows.Attack.UnexpectedImagePath</a></li><li><a href=/artifact_references/pages/windows.carving.cobaltstrike/>Windows.Carving.CobaltStrike</a></li><li><a href=/artifact_references/pages/windows.carving.usn/>Windows.Carving.USN</a></li><li><a href=/artifact_references/pages/windows.carving.usnfiles/>Windows.Carving.USNFiles</a></li><li><a href=/artifact_references/pages/windows.collectors.file/>Windows.Collectors.File</a></li><li><a href=/artifact_references/pages/windows.collectors.vss/>Windows.Collectors.VSS</a></li><li><a href=/artifact_references/pages/windows.detection.amcache/>Windows.Detection.Amcache</a></li><li><a href=/artifact_references/pages/windows.detection.binaryhunter/>Windows.Detection.BinaryHunter</a></li><li><a href=/artifact_references/pages/windows.detection.binaryrename/>Windows.Detection.BinaryRename</a></li><li><a href=/artifact_references/pages/windows.detection.cryptneturlcache/>Windows.Detection.CryptnetUrlCache</a></li><li><a href=/artifact_references/pages/windows.detection.environmentvariables/>Windows.Detection.EnvironmentVariables</a></li><li><a href=/artifact_references/pages/windows.detection.forwardedimports/>Windows.Detection.ForwardedImports</a></li><li><a href=/artifact_references/pages/windows.detection.impersonation/>Windows.Detection.Impersonation</a></li><li><a href=/artifact_references/pages/windows.detection.mutants/>Windows.Detection.Mutants</a></li><li><a href=/artifact_references/pages/windows.detection.templateinjection/>Windows.Detection.TemplateInjection</a></li><li><a href=/artifact_references/pages/windows.detection.yara.device/>Windows.Detection.Yara.Device</a></li><li><a href=/artifact_references/pages/windows.detection.yara.ntfs/>Windows.Detection.Yara.NTFS</a></li><li><a href=/artifact_references/pages/windows.detection.yara.physicalmemory/>Windows.Detection.Yara.PhysicalMemory</a></li><li><a href=/artifact_references/pages/windows.detection.yara.process/>Windows.Detection.Yara.Process</a></li><li><a href=/artifact_references/pages/windows.etw.viewsessions/>Windows.ETW.ViewSessions</a></li><li><a href=/artifact_references/pages/windows.eventlogs.alternatelogon/>Windows.EventLogs.AlternateLogon</a></li><li><a href=/artifact_references/pages/windows.eventlogs.cleared/>Windows.EventLogs.Cleared</a></li><li><a href=/artifact_references/pages/windows.eventlogs.dhcp/>Windows.EventLogs.DHCP</a></li><li><a href=/artifact_references/pages/windows.eventlogs.evtx/>Windows.EventLogs.Evtx</a></li><li><a href=/artifact_references/pages/windows.eventlogs.evtxhunter/>Windows.EventLogs.EvtxHunter</a></li><li><a href=/artifact_references/pages/windows.eventlogs.explicitlogon/>Windows.EventLogs.ExplicitLogon</a></li><li><a href=/artifact_references/pages/windows.eventlogs.kerbroasting/>Windows.EventLogs.Kerbroasting</a></li><li><a href=/artifact_references/pages/windows.eventlogs.modifications/>Windows.EventLogs.Modifications</a></li><li><a href=/artifact_references/pages/windows.eventlogs.powershellmodule/>Windows.EventLogs.PowershellModule</a></li><li><a href=/artifact_references/pages/windows.eventlogs.powershellscriptblock/>Windows.EventLogs.PowershellScriptblock</a></li><li><a href=/artifact_references/pages/windows.eventlogs.rdpauth/>Windows.EventLogs.RDPAuth</a></li><li><a href=/artifact_references/pages/windows.eventlogs.scheduledtasks/>Windows.EventLogs.ScheduledTasks</a></li><li><a href=/artifact_references/pages/windows.eventlogs.servicecreationcomspec/>Windows.EventLogs.ServiceCreationComspec</a></li><li><a href=/artifact_references/pages/windows.eventlogs.symantec/>Windows.EventLogs.Symantec</a></li><li><a href=/artifact_references/pages/windows.eventlogs.telerik/>Windows.EventLogs.Telerik</a></li><li><a href=/artifact_references/pages/windows.forensics.bam/>Windows.Forensics.Bam</a></li><li><a href=/artifact_references/pages/windows.forensics.bulkextractor/>Windows.Forensics.BulkExtractor</a></li><li><a href=/artifact_references/pages/windows.forensics.certutil/>Windows.Forensics.CertUtil</a></li><li><a href=/artifact_references/pages/windows.forensics.filenamesearch/>Windows.Forensics.FilenameSearch</a></li><li><a href=/artifact_references/pages/windows.forensics.lnk/>Windows.Forensics.Lnk</a></li><li><a href=/artifact_references/pages/windows.forensics.partitiontable/>Windows.Forensics.PartitionTable</a></li><li><a href=/artifact_references/pages/windows.forensics.prefetch/>Windows.Forensics.Prefetch</a></li><li><a href=/artifact_references/pages/windows.forensics.processinfo/>Windows.Forensics.ProcessInfo</a></li><li><a href=/artifact_references/pages/windows.forensics.rdpcache/>Windows.Forensics.RDPCache</a></li><li><a href=/artifact_references/pages/windows.forensics.recentapps/>Windows.Forensics.RecentApps</a></li><li><a href=/artifact_references/pages/windows.forensics.recyclebin/>Windows.Forensics.RecycleBin</a></li><li><a href=/artifact_references/pages/windows.forensics.sam/>Windows.Forensics.SAM</a></li><li><a href=/artifact_references/pages/windows.forensics.shellbags/>Windows.Forensics.Shellbags</a></li><li><a href=/artifact_references/pages/windows.forensics.solarwindssunburst/>Windows.Forensics.SolarwindsSunburst</a></li><li><a href=/artifact_references/pages/windows.forensics.srum/>Windows.Forensics.SRUM</a></li><li><a href=/artifact_references/pages/windows.forensics.timeline/>Windows.Forensics.Timeline</a></li><li><a href=/artifact_references/pages/windows.forensics.uefi/>Windows.Forensics.UEFI</a></li><li><a href=/artifact_references/pages/windows.forensics.useraccesslogs/>Windows.Forensics.UserAccessLogs</a></li><li><a href=/artifact_references/pages/windows.forensics.usn/>Windows.Forensics.Usn</a></li><li><a href=/artifact_references/pages/windows.kapefiles.targets/>Windows.KapeFiles.Targets</a></li><li><a href=/artifact_references/pages/windows.memory.acquisition/>Windows.Memory.Acquisition</a></li><li><a href=/artifact_references/pages/windows.memory.intezer/>Windows.Memory.Intezer</a></li><li><a href=/artifact_references/pages/windows.memory.pedump/>Windows.Memory.PEDump</a></li><li><a href=/artifact_references/pages/windows.memory.processdump/>Windows.Memory.ProcessDump</a></li><li><a href=/artifact_references/pages/windows.memory.processinfo/>Windows.Memory.ProcessInfo</a></li><li><a href=/artifact_references/pages/windows.network.arpcache/>Windows.Network.ArpCache</a></li><li><a href=/artifact_references/pages/windows.network.interfaceaddresses/>Windows.Network.InterfaceAddresses</a></li><li><a href=/artifact_references/pages/windows.network.listeningports/>Windows.Network.ListeningPorts</a></li><li><a href=/artifact_references/pages/windows.network.netstat/>Windows.Network.Netstat</a></li><li><a href=/artifact_references/pages/windows.network.netstatenriched/>Windows.Network.NetstatEnriched</a></li><li><a href=/artifact_references/pages/windows.network.packetcapture/>Windows.Network.PacketCapture</a></li><li><a href=/artifact_references/pages/windows.ntfs.adshunter/>Windows.NTFS.ADSHunter</a></li><li><a href=/artifact_references/pages/windows.ntfs.extendedattributes/>Windows.NTFS.ExtendedAttributes</a></li><li><a href=/artifact_references/pages/windows.ntfs.i30/>Windows.NTFS.I30</a></li><li><a href=/artifact_references/pages/windows.ntfs.mft/>Windows.NTFS.MFT</a></li><li><a href=/artifact_references/pages/windows.ntfs.recover/>Windows.NTFS.Recover</a></li><li><a href=/artifact_references/pages/windows.osquery.generic/>Windows.OSQuery.Generic</a></li><li><a href=/artifact_references/pages/windows.packs.lateralmovement/>Windows.Packs.LateralMovement</a></li><li><a href=/artifact_references/pages/windows.packs.persistence/>Windows.Packs.Persistence</a></li><li><a href=/artifact_references/pages/windows.persistence.debug/>Windows.Persistence.Debug</a></li><li><a href=/artifact_references/pages/windows.persistence.permanentwmievents/>Windows.Persistence.PermanentWMIEvents</a></li><li><a href=/artifact_references/pages/windows.persistence.powershellprofile/>Windows.Persistence.PowershellProfile</a></li><li><a href=/artifact_references/pages/windows.persistence.powershellregistry/>Windows.Persistence.PowershellRegistry</a></li><li><a href=/artifact_references/pages/windows.persistence.wow64cpu/>Windows.Persistence.Wow64cpu</a></li><li><a href=/artifact_references/pages/windows.registry.appcompatcache/>Windows.Registry.AppCompatCache</a></li><li><a href=/artifact_references/pages/windows.registry.backuprestore/>Windows.Registry.BackupRestore</a></li><li><a href=/artifact_references/pages/windows.registry.enabledmacro/>Windows.Registry.EnabledMacro</a></li><li><a href=/artifact_references/pages/windows.registry.enableunsafeclientmailrules/>Windows.Registry.EnableUnsafeClientMailRules</a></li><li><a href=/artifact_references/pages/windows.registry.mountpoints2/>Windows.Registry.MountPoints2</a></li><li><a href=/artifact_references/pages/windows.registry.ntuser/>Windows.Registry.NTUser</a></li><li><a href=/artifact_references/pages/windows.registry.ntuser.upload/>Windows.Registry.NTUser.Upload</a></li><li><a href=/artifact_references/pages/windows.registry.portproxy/>Windows.Registry.PortProxy</a></li><li><a href=/artifact_references/pages/windows.registry.puttyhostkeys/>Windows.Registry.PuttyHostKeys</a></li><li><a href=/artifact_references/pages/windows.registry.rdp/>Windows.Registry.RDP</a></li><li><a href=/artifact_references/pages/windows.registry.recentdocs/>Windows.Registry.RecentDocs</a></li><li><a href=/artifact_references/pages/windows.registry.sysinternals.eulacheck/>Windows.Registry.Sysinternals.Eulacheck</a></li><li><a href=/artifact_references/pages/windows.registry.userassist/>Windows.Registry.UserAssist</a></li><li><a href=/artifact_references/pages/windows.registry.wdigest/>Windows.Registry.WDigest</a></li><li><a href=/artifact_references/pages/windows.remediation.quarantine/>Windows.Remediation.Quarantine</a></li><li><a href=/artifact_references/pages/windows.remediation.scheduledtasks/>Windows.Remediation.ScheduledTasks</a></li><li><a href=/artifact_references/pages/windows.remediation.sinkhole/>Windows.Remediation.Sinkhole</a></li><li><a href=/artifact_references/pages/windows.search.filefinder/>Windows.Search.FileFinder</a></li><li><a href=/artifact_references/pages/windows.search.smbfilefinder/>Windows.Search.SMBFileFinder</a></li><li><a href=/artifact_references/pages/windows.search.vss/>Windows.Search.VSS</a></li><li><a href=/artifact_references/pages/windows.search.yara/>Windows.Search.Yara</a></li><li><a href=/artifact_references/pages/windows.sys.allusers/>Windows.Sys.AllUsers</a></li><li><a href=/artifact_references/pages/windows.sys.appcompatshims/>Windows.Sys.AppcompatShims</a></li><li><a href=/artifact_references/pages/windows.sys.certificateauthorities/>Windows.Sys.CertificateAuthorities</a></li><li><a href=/artifact_references/pages/windows.sys.diskinfo/>Windows.Sys.DiskInfo</a></li><li><a href=/artifact_references/pages/windows.sys.drivers/>Windows.Sys.Drivers</a></li><li><a href=/artifact_references/pages/windows.sys.firewallrules/>Windows.Sys.FirewallRules</a></li><li><a href=/artifact_references/pages/windows.sys.interfaces/>Windows.Sys.Interfaces</a></li><li><a href=/artifact_references/pages/windows.sys.physicalmemoryranges/>Windows.Sys.PhysicalMemoryRanges</a></li><li><a href=/artifact_references/pages/windows.sys.programs/>Windows.Sys.Programs</a></li><li><a href=/artifact_references/pages/windows.sys.startupitems/>Windows.Sys.StartupItems</a></li><li><a href=/artifact_references/pages/windows.sys.users/>Windows.Sys.Users</a></li><li><a href=/artifact_references/pages/windows.sysinternals.autoruns/>Windows.Sysinternals.Autoruns</a></li><li><a href=/artifact_references/pages/windows.sysinternals.sysmoninstall/>Windows.Sysinternals.SysmonInstall</a></li><li><a href=/artifact_references/pages/windows.system.amcache/>Windows.System.Amcache</a></li><li><a href=/artifact_references/pages/windows.system.auditpolicy/>Windows.System.AuditPolicy</a></li><li><a href=/artifact_references/pages/windows.system.catfiles/>Windows.System.CatFiles</a></li><li><a href=/artifact_references/pages/windows.system.cmdshell/>Windows.System.CmdShell</a></li><li><a href=/artifact_references/pages/windows.system.criticalservices/>Windows.System.CriticalServices</a></li><li><a href=/artifact_references/pages/windows.system.dlls/>Windows.System.DLLs</a></li><li><a href=/artifact_references/pages/windows.system.dnscache/>Windows.System.DNSCache</a></li><li><a href=/artifact_references/pages/windows.system.domainrole/>Windows.System.DomainRole</a></li><li><a href=/artifact_references/pages/windows.system.handles/>Windows.System.Handles</a></li><li><a href=/artifact_references/pages/windows.system.hostsfile/>Windows.System.HostsFile</a></li><li><a href=/artifact_references/pages/windows.system.localadmins/>Windows.System.LocalAdmins</a></li><li><a href=/artifact_references/pages/windows.system.powershell/>Windows.System.PowerShell</a></li><li><a href=/artifact_references/pages/windows.system.powershell.moduleanalysiscache/>Windows.System.Powershell.ModuleAnalysisCache</a></li><li><a href=/artifact_references/pages/windows.system.powershell.psreadline/>Windows.System.Powershell.PSReadline</a></li><li><a href=/artifact_references/pages/windows.system.pslist/>Windows.System.Pslist</a></li><li><a href=/artifact_references/pages/windows.system.rootcastore/>Windows.System.RootCAStore</a></li><li><a href=/artifact_references/pages/windows.system.services/>Windows.System.Services</a></li><li><a href=/artifact_references/pages/windows.system.shares/>Windows.System.Shares</a></li><li><a href=/artifact_references/pages/windows.system.signers/>Windows.System.Signers</a></li><li><a href=/artifact_references/pages/windows.system.svchost/>Windows.System.SVCHost</a></li><li><a href=/artifact_references/pages/windows.system.taskscheduler/>Windows.System.TaskScheduler</a></li><li><a href=/artifact_references/pages/windows.system.untrustedbinaries/>Windows.System.UntrustedBinaries</a></li><li><a href=/artifact_references/pages/windows.system.vad/>Windows.System.VAD</a></li><li><a href=/artifact_references/pages/windows.system.vbscript/>Windows.System.VBScript</a></li><li><a href=/artifact_references/pages/windows.system.wmiquery/>Windows.System.WMIQuery</a></li><li><a href=/artifact_references/pages/windows.timeline.mft/>Windows.Timeline.MFT</a></li><li><a href=/artifact_references/pages/windows.timeline.prefetch/>Windows.Timeline.Prefetch</a></li><li><a href=/artifact_references/pages/windows.timeline.registry.runmru/>Windows.Timeline.Registry.RunMRU</a></li><li><a href=/artifact_references/pages/windows.triage.processmemory/>Windows.Triage.ProcessMemory</a></li><li><a href=/artifact_references/pages/windows.triage.sds/>Windows.Triage.SDS</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/client-event-artifact/index.html b/tags/client-event-artifact/index.html
index 44a93db1c80..e96c4b28635 100644
--- a/tags/client-event-artifact/index.html
+++ b/tags/client-event-artifact/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Client Event Artifact :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/client-event-artifact/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/client-event-artifact/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Client Event Artifact</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Client Event Artifact</h1><ul><li><a href=/artifact_references/pages/demo.plugins.fifo/>Demo.Plugins.Fifo</a></li><li><a href=/artifact_references/pages/generic.client.stats/>Generic.Client.Stats</a></li><li><a href=/artifact_references/pages/linux.events.processexecutions/>Linux.Events.ProcessExecutions</a></li><li><a href=/artifact_references/pages/linux.events.sshbruteforce/>Linux.Events.SSHBruteforce</a></li><li><a href=/artifact_references/pages/linux.events.sshlogin/>Linux.Events.SSHLogin</a></li><li><a href=/artifact_references/pages/system.flow.archive/>System.Flow.Archive</a></li><li><a href=/artifact_references/pages/system.flow.completion/>System.Flow.Completion</a></li><li><a href=/artifact_references/pages/system.hunt.archive/>System.Hunt.Archive</a></li><li><a href=/artifact_references/pages/system.upload.completion/>System.Upload.Completion</a></li><li><a href=/artifact_references/pages/windows.detection.processcreation/>Windows.Detection.ProcessCreation</a></li><li><a href=/artifact_references/pages/windows.detection.psexecservice/>Windows.Detection.PsexecService</a></li><li><a href=/artifact_references/pages/windows.detection.psexecservice.kill/>Windows.Detection.PsexecService.Kill</a></li><li><a href=/artifact_references/pages/windows.detection.registry/>Windows.Detection.Registry</a></li><li><a href=/artifact_references/pages/windows.detection.service.upload/>Windows.Detection.Service.Upload</a></li><li><a href=/artifact_references/pages/windows.detection.thumbdrives.list/>Windows.Detection.Thumbdrives.List</a></li><li><a href=/artifact_references/pages/windows.detection.thumbdrives.officekeywords/>Windows.Detection.Thumbdrives.OfficeKeywords</a></li><li><a href=/artifact_references/pages/windows.detection.thumbdrives.officemacros/>Windows.Detection.Thumbdrives.OfficeMacros</a></li><li><a href=/artifact_references/pages/windows.detection.usn/>Windows.Detection.Usn</a></li><li><a href=/artifact_references/pages/windows.detection.wmiprocesscreation/>Windows.Detection.WMIProcessCreation</a></li><li><a href=/artifact_references/pages/windows.etw.dns/>Windows.ETW.DNS</a></li><li><a href=/artifact_references/pages/windows.etw.dnsqueriesserver/>Windows.ETW.DNSQueriesServer</a></li><li><a href=/artifact_references/pages/windows.etw.edgeurls/>Windows.ETW.EdgeURLs</a></li><li><a href=/artifact_references/pages/windows.etw.etwsessions/>Windows.ETW.ETWSessions</a></li><li><a href=/artifact_references/pages/windows.etw.filecreation/>Windows.ETW.FileCreation</a></li><li><a href=/artifact_references/pages/windows.etw.registry/>Windows.ETW.Registry</a></li><li><a href=/artifact_references/pages/windows.etw.wmiprocesscreate/>Windows.ETW.WMIProcessCreate</a></li><li><a href=/artifact_references/pages/windows.events.eventlogmodifications/>Windows.Events.EventLogModifications</a></li><li><a href=/artifact_references/pages/windows.events.failedlogbeforesuccess/>Windows.Events.FailedLogBeforeSuccess</a></li><li><a href=/artifact_references/pages/windows.events.kerberoasting/>Windows.Events.Kerberoasting</a></li><li><a href=/artifact_references/pages/windows.events.kerbroasting/>Windows.Events.Kerbroasting</a></li><li><a href=/artifact_references/pages/windows.events.mutants/>Windows.Events.Mutants</a></li><li><a href=/artifact_references/pages/windows.events.processcreation/>Windows.Events.ProcessCreation</a></li><li><a href=/artifact_references/pages/windows.events.servicecreation/>Windows.Events.ServiceCreation</a></li><li><a href=/artifact_references/pages/windows.events.trackaccount/>Windows.Events.Trackaccount</a></li><li><a href=/artifact_references/pages/windows.events.trackprocesses/>Windows.Events.TrackProcesses</a></li><li><a href=/artifact_references/pages/windows.events.trackprocessesbasic/>Windows.Events.TrackProcessesBasic</a></li><li><a href=/artifact_references/pages/windows.forensics.localhashes.usn/>Windows.Forensics.LocalHashes.Usn</a></li><li><a href=/artifact_references/pages/windows.remediation.quarantinemonitor/>Windows.Remediation.QuarantineMonitor</a></li><li><a href=/artifact_references/pages/windows.sysinternals.sysmonlogforward/>Windows.Sysinternals.SysmonLogForward</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Client Event Artifact</h1><ul><li><a href=/artifact_references/pages/demo.plugins.fifo/>Demo.Plugins.Fifo</a></li><li><a href=/artifact_references/pages/generic.client.stats/>Generic.Client.Stats</a></li><li><a href=/artifact_references/pages/linux.events.processexecutions/>Linux.Events.ProcessExecutions</a></li><li><a href=/artifact_references/pages/linux.events.sshbruteforce/>Linux.Events.SSHBruteforce</a></li><li><a href=/artifact_references/pages/linux.events.sshlogin/>Linux.Events.SSHLogin</a></li><li><a href=/artifact_references/pages/system.flow.archive/>System.Flow.Archive</a></li><li><a href=/artifact_references/pages/system.flow.completion/>System.Flow.Completion</a></li><li><a href=/artifact_references/pages/system.hunt.archive/>System.Hunt.Archive</a></li><li><a href=/artifact_references/pages/system.upload.completion/>System.Upload.Completion</a></li><li><a href=/artifact_references/pages/windows.detection.processcreation/>Windows.Detection.ProcessCreation</a></li><li><a href=/artifact_references/pages/windows.detection.psexecservice/>Windows.Detection.PsexecService</a></li><li><a href=/artifact_references/pages/windows.detection.psexecservice.kill/>Windows.Detection.PsexecService.Kill</a></li><li><a href=/artifact_references/pages/windows.detection.registry/>Windows.Detection.Registry</a></li><li><a href=/artifact_references/pages/windows.detection.service.upload/>Windows.Detection.Service.Upload</a></li><li><a href=/artifact_references/pages/windows.detection.thumbdrives.list/>Windows.Detection.Thumbdrives.List</a></li><li><a href=/artifact_references/pages/windows.detection.thumbdrives.officekeywords/>Windows.Detection.Thumbdrives.OfficeKeywords</a></li><li><a href=/artifact_references/pages/windows.detection.thumbdrives.officemacros/>Windows.Detection.Thumbdrives.OfficeMacros</a></li><li><a href=/artifact_references/pages/windows.detection.usn/>Windows.Detection.Usn</a></li><li><a href=/artifact_references/pages/windows.detection.wmiprocesscreation/>Windows.Detection.WMIProcessCreation</a></li><li><a href=/artifact_references/pages/windows.etw.dns/>Windows.ETW.DNS</a></li><li><a href=/artifact_references/pages/windows.etw.dnsqueriesserver/>Windows.ETW.DNSQueriesServer</a></li><li><a href=/artifact_references/pages/windows.etw.edgeurls/>Windows.ETW.EdgeURLs</a></li><li><a href=/artifact_references/pages/windows.etw.etwsessions/>Windows.ETW.ETWSessions</a></li><li><a href=/artifact_references/pages/windows.etw.filecreation/>Windows.ETW.FileCreation</a></li><li><a href=/artifact_references/pages/windows.etw.registry/>Windows.ETW.Registry</a></li><li><a href=/artifact_references/pages/windows.etw.wmiprocesscreate/>Windows.ETW.WMIProcessCreate</a></li><li><a href=/artifact_references/pages/windows.events.eventlogmodifications/>Windows.Events.EventLogModifications</a></li><li><a href=/artifact_references/pages/windows.events.failedlogbeforesuccess/>Windows.Events.FailedLogBeforeSuccess</a></li><li><a href=/artifact_references/pages/windows.events.kerberoasting/>Windows.Events.Kerberoasting</a></li><li><a href=/artifact_references/pages/windows.events.kerbroasting/>Windows.Events.Kerbroasting</a></li><li><a href=/artifact_references/pages/windows.events.mutants/>Windows.Events.Mutants</a></li><li><a href=/artifact_references/pages/windows.events.processcreation/>Windows.Events.ProcessCreation</a></li><li><a href=/artifact_references/pages/windows.events.servicecreation/>Windows.Events.ServiceCreation</a></li><li><a href=/artifact_references/pages/windows.events.trackaccount/>Windows.Events.Trackaccount</a></li><li><a href=/artifact_references/pages/windows.events.trackprocesses/>Windows.Events.TrackProcesses</a></li><li><a href=/artifact_references/pages/windows.events.trackprocessesbasic/>Windows.Events.TrackProcessesBasic</a></li><li><a href=/artifact_references/pages/windows.forensics.localhashes.usn/>Windows.Forensics.LocalHashes.Usn</a></li><li><a href=/artifact_references/pages/windows.remediation.quarantinemonitor/>Windows.Remediation.QuarantineMonitor</a></li><li><a href=/artifact_references/pages/windows.sysinternals.sysmonlogforward/>Windows.Sysinternals.SysmonLogForward</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/cobalt-strike/index.html b/tags/cobalt-strike/index.html
index d9a679ebb29..3725563a502 100644
--- a/tags/cobalt-strike/index.html
+++ b/tags/cobalt-strike/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Cobalt Strike :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/cobalt-strike/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/cobalt-strike/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Cobalt Strike</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Cobalt Strike</h1><ul><li><a href=/blog/2021/2021-11-09-vql-data-manipulation/>Cobalt Strike payload discovery and data manipulation in VQL</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Cobalt Strike</h1><ul><li><a href=/blog/2021/2021-11-09-vql-data-manipulation/>Cobalt Strike payload discovery and data manipulation in VQL</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/collector/index.html b/tags/collector/index.html
index d7b90f9f242..6e0b5984343 100644
--- a/tags/collector/index.html
+++ b/tags/collector/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>collector :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/collector/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/collector/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>collector</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-collector</h1><ul><li><a href=/knowledge_base/tips/automate_offline_collector/>How can I automate the creation of the offline collector?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+collector</h1><ul><li><a href=/knowledge_base/tips/automate_offline_collector/>How can I automate the creation of the offline collector?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/community/index.html b/tags/community/index.html
index 0fc857f79f1..5feda2b7c5a 100644
--- a/tags/community/index.html
+++ b/tags/community/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Community :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/community/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/community/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Community</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Community</h1><ul><li><a href=/blog/2023/2023-04-03-velociraptor-survey/>The Velociraptor annual community survey</a></li><li><a href=/blog/2021/2021-10-22-a-closer-look-at-the-winning-entry-in-the-2021-velociraptor-contributor-competition-575c387610af/>A Closer Look at the Winning Entry in the 2021 Velociraptor Contributor Competition</a></li><li><a href=/blog/2021/2021-10-08-contributor-contest/>The 2021 Contributor Contest</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Community</h1><ul><li><a href=/blog/2023/2023-04-03-velociraptor-survey/>The Velociraptor annual community survey</a></li><li><a href=/blog/2021/2021-10-22-a-closer-look-at-the-winning-entry-in-the-2021-velociraptor-contributor-competition-575c387610af/>A Closer Look at the Winning Entry in the 2021 Velociraptor Contributor Competition</a></li><li><a href=/blog/2021/2021-10-08-contributor-contest/>The 2021 Contributor Contest</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/configuration/index.html b/tags/configuration/index.html
index 4ba7fd1aa1d..e7941223907 100644
--- a/tags/configuration/index.html
+++ b/tags/configuration/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>configuration :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/configuration/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/configuration/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>configuration</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-configuration</h1><ul><li><a href=/knowledge_base/tips/plugin_not_found/>What to do about error "Plugin info not found"</a></li><li><a href=/knowledge_base/tips/automate_offline_collector/>How can I automate the creation of the offline collector?</a></li><li><a href=/knowledge_base/tips/getting_latest_release/>How do I get the latest release binary?</a></li><li><a href=/knowledge_base/tips/merging_config/>How can I override the configuration file?</a></li><li><a href=/knowledge_base/tips/favorites/>How can I save my favorite collections for the future?</a></li><li><a href=/knowledge_base/tips/rolling_certificates/>How to fix "certificate has expired or not yet valid error"?</a></li><li><a href=/knowledge_base/tips/startup_artifacts/>What is the easiest way to have Velociraptor start with a custom server artifact automatically loaded?</a></li><li><a href=/knowledge_base/tips/ssl/>How do I use my own SSL certificates?</a></li><li><a href=/knowledge_base/tips/proxy/>How do I set a proxy for client communications?</a></li><li><a href=/knowledge_base/tips/notebook_timeout/>How to increase notebook timeout</a></li><li><a href=/knowledge_base/tips/upgrading/>How do I upgrade my server and clients?</a></li><li><a href=/knowledge_base/tips/multiple_oauth/>How can I configure Velociraptor for multiple SSO providers</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+configuration</h1><ul><li><a href=/knowledge_base/tips/plugin_not_found/>What to do about error "Plugin info not found"</a></li><li><a href=/knowledge_base/tips/automate_offline_collector/>How can I automate the creation of the offline collector?</a></li><li><a href=/knowledge_base/tips/getting_latest_release/>How do I get the latest release binary?</a></li><li><a href=/knowledge_base/tips/merging_config/>How can I override the configuration file?</a></li><li><a href=/knowledge_base/tips/favorites/>How can I save my favorite collections for the future?</a></li><li><a href=/knowledge_base/tips/rolling_certificates/>How to fix "certificate has expired or not yet valid error"?</a></li><li><a href=/knowledge_base/tips/startup_artifacts/>What is the easiest way to have Velociraptor start with a custom server artifact automatically loaded?</a></li><li><a href=/knowledge_base/tips/ssl/>How do I use my own SSL certificates?</a></li><li><a href=/knowledge_base/tips/proxy/>How do I set a proxy for client communications?</a></li><li><a href=/knowledge_base/tips/notebook_timeout/>How to increase notebook timeout</a></li><li><a href=/knowledge_base/tips/upgrading/>How do I upgrade my server and clients?</a></li><li><a href=/knowledge_base/tips/multiple_oauth/>How can I configure Velociraptor for multiple SSO providers</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/containment/index.html b/tags/containment/index.html
index f224214f249..06cb0175353 100644
--- a/tags/containment/index.html
+++ b/tags/containment/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>containment :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/containment/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/containment/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>containment</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-containment</h1><ul><li><a href=/knowledge_base/tips/quarantine/>Custom quarantine exclusions</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+containment</h1><ul><li><a href=/knowledge_base/tips/quarantine/>Custom quarantine exclusions</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/debugging/index.html b/tags/debugging/index.html
index 1c33d7e3231..8149d520296 100644
--- a/tags/debugging/index.html
+++ b/tags/debugging/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>debugging :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/debugging/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/debugging/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>debugging</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-debugging</h1><ul><li><a href=/knowledge_base/tips/debugging_clients/>How do I debug the client while it is running?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+debugging</h1><ul><li><a href=/knowledge_base/tips/debugging_clients/>How do I debug the client while it is running?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/decimal/index.html b/tags/decimal/index.html
index 326ce7582f0..2373825232a 100644
--- a/tags/decimal/index.html
+++ b/tags/decimal/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>decimal :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/decimal/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/decimal/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>decimal</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-decimal</h1><ul><li><a href=/knowledge_base/tips/decimaldecode/>How can I convert decimal?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+decimal</h1><ul><li><a href=/knowledge_base/tips/decimaldecode/>How can I convert decimal?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/decode/index.html b/tags/decode/index.html
index fb1f40450d9..68a8d963b88 100644
--- a/tags/decode/index.html
+++ b/tags/decode/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>decode :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/decode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/decode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>decode</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-decode</h1><ul><li><a href=/knowledge_base/tips/decimaldecode/>How can I convert decimal?</a></li><li><a href=/knowledge_base/tips/urldecode/>How can I url/percent decode a string?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+decode</h1><ul><li><a href=/knowledge_base/tips/decimaldecode/>How can I convert decimal?</a></li><li><a href=/knowledge_base/tips/urldecode/>How can I url/percent decode a string?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/deployment/index.html b/tags/deployment/index.html
index f24f65d6c7b..f12ac26f9f6 100644
--- a/tags/deployment/index.html
+++ b/tags/deployment/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>deployment :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/deployment/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/deployment/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>deployment</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-deployment</h1><ul><li><a href=/knowledge_base/tips/clone_organization_to_other_server/>How can I clone an organization with all its hunts and artifacts to another instance?</a></li><li><a href=/knowledge_base/tips/plugin_not_found/>What to do about error "Plugin info not found"</a></li><li><a href=/knowledge_base/tips/getting_latest_release/>How do I get the latest release binary?</a></li><li><a href=/knowledge_base/tips/rolling_certificates/>How to fix "certificate has expired or not yet valid error"?</a></li><li><a href=/knowledge_base/tips/glibc_errors/>What do I do about "version GLIBC_2.14 not found" errors?</a></li><li><a href=/knowledge_base/tips/startup_artifacts/>What is the easiest way to have Velociraptor start with a custom server artifact automatically loaded?</a></li><li><a href=/knowledge_base/tips/ssl/>How do I use my own SSL certificates?</a></li><li><a href=/knowledge_base/tips/proxy/>How do I set a proxy for client communications?</a></li><li><a href=/knowledge_base/tips/multiple_oauth/>How can I configure Velociraptor for multiple SSO providers</a></li><li><a href=/knowledge_base/tips/debugging_clients/>How do I debug the client while it is running?</a></li><li><a href=/knowledge_base/tips/deploying_in_agentless_mode/>How do I deploy the client as agentless (without install)?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+deployment</h1><ul><li><a href=/knowledge_base/tips/clone_organization_to_other_server/>How can I clone an organization with all its hunts and artifacts to another instance?</a></li><li><a href=/knowledge_base/tips/plugin_not_found/>What to do about error "Plugin info not found"</a></li><li><a href=/knowledge_base/tips/getting_latest_release/>How do I get the latest release binary?</a></li><li><a href=/knowledge_base/tips/rolling_certificates/>How to fix "certificate has expired or not yet valid error"?</a></li><li><a href=/knowledge_base/tips/glibc_errors/>What do I do about "version GLIBC_2.14 not found" errors?</a></li><li><a href=/knowledge_base/tips/startup_artifacts/>What is the easiest way to have Velociraptor start with a custom server artifact automatically loaded?</a></li><li><a href=/knowledge_base/tips/ssl/>How do I use my own SSL certificates?</a></li><li><a href=/knowledge_base/tips/proxy/>How do I set a proxy for client communications?</a></li><li><a href=/knowledge_base/tips/multiple_oauth/>How can I configure Velociraptor for multiple SSO providers</a></li><li><a href=/knowledge_base/tips/debugging_clients/>How do I debug the client while it is running?</a></li><li><a href=/knowledge_base/tips/deploying_in_agentless_mode/>How do I deploy the client as agentless (without install)?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/detection/index.html b/tags/detection/index.html
index dbd58285c87..372e7c0b150 100644
--- a/tags/detection/index.html
+++ b/tags/detection/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Detection :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/detection/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/detection/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Detection</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Detection</h1><ul><li><a href=/blog/2021/2021-11-09-vql-data-manipulation/>Cobalt Strike payload discovery and data manipulation in VQL</a></li><li><a href=/blog/2021/2021-07-12-velociraptor-vs-printnightmare/>Velociraptor vs Printnightmare</a></li><li><a href=/blog/2023/2023-04-05-qakbot/>Automating Qakbot decode at scale</a></li><li><a href=/blog/2022/2022-01-12-wmi-eventing/>WMI Event Consumers: what are you missing?</a></li><li><a href=/blog/2021/2021-11-09-eql2vql/>EQL to VQL - Leverage EQL based detection rules in Velociraptor</a></li><li><a href=/blog/2021/2021-09-03-process-spoofing/>ETW Part 2: Process Parent Spoofing</a></li><li><a href=/blog/2021/2021-08-18-velociraptor-and-etw/>Event Tracing for Windows Part 1</a></li><li><a href=/exchange/artifacts/pages/hash_run_keys/>HashRunKeys</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Detection</h1><ul><li><a href=/blog/2021/2021-11-09-vql-data-manipulation/>Cobalt Strike payload discovery and data manipulation in VQL</a></li><li><a href=/blog/2021/2021-07-12-velociraptor-vs-printnightmare/>Velociraptor vs Printnightmare</a></li><li><a href=/blog/2023/2023-04-05-qakbot/>Automating Qakbot decode at scale</a></li><li><a href=/blog/2022/2022-01-12-wmi-eventing/>WMI Event Consumers: what are you missing?</a></li><li><a href=/blog/2021/2021-11-09-eql2vql/>EQL to VQL - Leverage EQL based detection rules in Velociraptor</a></li><li><a href=/blog/2021/2021-09-03-process-spoofing/>ETW Part 2: Process Parent Spoofing</a></li><li><a href=/blog/2021/2021-08-18-velociraptor-and-etw/>Event Tracing for Windows Part 1</a></li><li><a href=/exchange/artifacts/pages/hash_run_keys/>HashRunKeys</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/encode/index.html b/tags/encode/index.html
index 3a329ac85df..a0ed95d4c4a 100644
--- a/tags/encode/index.html
+++ b/tags/encode/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>encode :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/encode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/encode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>encode</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-encode</h1><ul><li><a href=/knowledge_base/tips/urldecode/>How can I url/percent decode a string?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+encode</h1><ul><li><a href=/knowledge_base/tips/urldecode/>How can I url/percent decode a string?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/etw/index.html b/tags/etw/index.html
index 5c363ac7485..d958d862db2 100644
--- a/tags/etw/index.html
+++ b/tags/etw/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>ETW :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/etw/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/etw/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>ETW</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-ETW</h1><ul><li><a href=/blog/2022/2022-01-12-wmi-eventing/>WMI Event Consumers: what are you missing?</a></li><li><a href=/blog/2021/2021-11-09-eql2vql/>EQL to VQL - Leverage EQL based detection rules in Velociraptor</a></li><li><a href=/blog/2021/2021-09-03-process-spoofing/>ETW Part 2: Process Parent Spoofing</a></li><li><a href=/blog/2021/2021-08-18-velociraptor-and-etw/>Event Tracing for Windows Part 1</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+ETW</h1><ul><li><a href=/blog/2022/2022-01-12-wmi-eventing/>WMI Event Consumers: what are you missing?</a></li><li><a href=/blog/2021/2021-11-09-eql2vql/>EQL to VQL - Leverage EQL based detection rules in Velociraptor</a></li><li><a href=/blog/2021/2021-09-03-process-spoofing/>ETW Part 2: Process Parent Spoofing</a></li><li><a href=/blog/2021/2021-08-18-velociraptor-and-etw/>Event Tracing for Windows Part 1</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/event/index.html b/tags/event/index.html
index 6e92d39b954..25edab8fddc 100644
--- a/tags/event/index.html
+++ b/tags/event/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>event :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/event/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/event/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>event</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-event</h1><ul><li><a href=/exchange/artifacts/pages/exchange.label.user/>Exchange.Label.User</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+event</h1><ul><li><a href=/exchange/artifacts/pages/exchange.label.user/>Exchange.Label.User</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/exploit/index.html b/tags/exploit/index.html
index 6ba53b45b2e..0f6072c60b3 100644
--- a/tags/exploit/index.html
+++ b/tags/exploit/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>exploit :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/exploit/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/exploit/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>exploit</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-exploit</h1><ul><li><a href=/exchange/artifacts/pages/linux.detection.vrealizeloginsightexploitation/>Linux.Detection.vRealizeLogInsightExploitation</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+exploit</h1><ul><li><a href=/exchange/artifacts/pages/linux.detection.vrealizeloginsightexploitation/>Linux.Detection.vRealizeLogInsightExploitation</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/filesystems/index.html b/tags/filesystems/index.html
index 4bb0382eec9..b8bdfe9e381 100644
--- a/tags/filesystems/index.html
+++ b/tags/filesystems/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Filesystems :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/filesystems/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/filesystems/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Filesystems</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Filesystems</h1><ul><li><a href=/blog/2021/2021-02-13-digging-for-files-with-velociraptor-a1c0a21e242b/>Digging for files with Velociraptor</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Filesystems</h1><ul><li><a href=/blog/2021/2021-02-13-digging-for-files-with-velociraptor-a1c0a21e242b/>Digging for files with Velociraptor</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/forensics/index.html b/tags/forensics/index.html
index 0e21283037f..b97bc4141aa 100644
--- a/tags/forensics/index.html
+++ b/tags/forensics/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Forensics :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/forensics/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/forensics/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Forensics</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Forensics</h1><ul><li><a href=/blog/2022/2022-08-04-post-processing/>Postprocessing Collections</a></li><li><a href=/knowledge_base/tips/registry_finder/>How do I search for registry keys</a></li><li><a href=/blog/2022/2022-03-22-deaddisk/>Dead disk Forensics</a></li><li><a href=/blog/2022/2022-03-21-paths/>Paths and filesystem accessors</a></li><li><a href=/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/>Carving $USN journal entries</a></li><li><a href=/blog/2021/2021-04-16-digging-into-process-memory-33c60a640cdb/>Digging into process memory</a></li><li><a href=/blog/2021/2021-02-13-digging-for-files-with-velociraptor-a1c0a21e242b/>Digging for files with Velociraptor</a></li><li><a href=/blog/2020/2020-11-13-the-windows-usn-journal-f0c55c9010e/>The Windows USN Journal</a></li><li><a href=/blog/2020/2020-07-14-triage-with-velociraptor-pt-4-cf0e60810d1e/>Triage with Velociraptor — Pt 4</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Forensics</h1><ul><li><a href=/blog/2022/2022-08-04-post-processing/>Postprocessing Collections</a></li><li><a href=/knowledge_base/tips/registry_finder/>How do I search for registry keys</a></li><li><a href=/blog/2022/2022-03-22-deaddisk/>Dead disk Forensics</a></li><li><a href=/blog/2022/2022-03-21-paths/>Paths and filesystem accessors</a></li><li><a href=/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/>Carving $USN journal entries</a></li><li><a href=/blog/2021/2021-04-16-digging-into-process-memory-33c60a640cdb/>Digging into process memory</a></li><li><a href=/blog/2021/2021-02-13-digging-for-files-with-velociraptor-a1c0a21e242b/>Digging for files with Velociraptor</a></li><li><a href=/blog/2020/2020-11-13-the-windows-usn-journal-f0c55c9010e/>The Windows USN Journal</a></li><li><a href=/blog/2020/2020-07-14-triage-with-velociraptor-pt-4-cf0e60810d1e/>Triage with Velociraptor — Pt 4</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/gui/index.html b/tags/gui/index.html
index 3ea7cf7053b..cd781f87724 100644
--- a/tags/gui/index.html
+++ b/tags/gui/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>GUI :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/gui/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/gui/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>GUI</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-GUI</h1><ul><li><a href=/knowledge_base/tips/favorites/>How can I save my favorite collections for the future?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+GUI</h1><ul><li><a href=/knowledge_base/tips/favorites/>How can I save my favorite collections for the future?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/hijacking/index.html b/tags/hijacking/index.html
index f4074f84dee..931546be94b 100644
--- a/tags/hijacking/index.html
+++ b/tags/hijacking/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>hijacking :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/hijacking/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/hijacking/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>hijacking</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-hijacking</h1><ul><li><a href=/exchange/artifacts/pages/windows.services.hijacking/>Custom.Windows.Services.Hijacking</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+hijacking</h1><ul><li><a href=/exchange/artifacts/pages/windows.services.hijacking/>Custom.Windows.Services.Hijacking</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/hunting/index.html b/tags/hunting/index.html
index 9362dcf1271..f6f5c81b22e 100644
--- a/tags/hunting/index.html
+++ b/tags/hunting/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>hunting :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/hunting/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/hunting/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>hunting</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-hunting</h1><ul><li><a href=/knowledge_base/tips/retry_hunt/>How do I re-collect a failed artifact in a hunt?</a></li><li><a href=/knowledge_base/tips/hunt_by_label/>How to control hunting by label groups?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+hunting</h1><ul><li><a href=/knowledge_base/tips/retry_hunt/>How do I re-collect a failed artifact in a hunt?</a></li><li><a href=/knowledge_base/tips/hunt_by_label/>How to control hunting by label groups?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/impacket/index.html b/tags/impacket/index.html
index f9d903de216..a401c2db727 100644
--- a/tags/impacket/index.html
+++ b/tags/impacket/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>impacket :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/impacket/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/impacket/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>impacket</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-impacket</h1><ul><li><a href=/exchange/artifacts/pages/windows.detection.pipehunter/>Windows.Detection.PipeHunter</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+impacket</h1><ul><li><a href=/exchange/artifacts/pages/windows.detection.pipehunter/>Windows.Detection.PipeHunter</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/index.html b/tags/index.html
index 701b890d580..dbfa206c4a8 100644
--- a/tags/index.html
+++ b/tags/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Tags :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Tags</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Tags</h1><ul><li><a href=/tags/random/>random</a></li><li><a href=/tags/vql/>VQL</a></li><li><a href=/tags/release/>Release</a></li><li><a href=/tags/archiving/>archiving</a></li><li><a href=/tags/deployment/>deployment</a></li><li><a href=/tags/orgs/>orgs</a></li><li><a href=/tags/configuration/>configuration</a></li><li><a href=/tags/detection/>Detection</a></li><li><a href=/tags/malware/>Malware</a></li><li><a href=/tags/qakbot/>Qakbot</a></li><li><a href=/tags/qbot/>QBot</a></li><li><a href=/tags/community/>Community</a></li><li><a href=/tags/containment/>containment</a></li><li><a href=/tags/quarantine/>quarantine</a></li><li><a href=/tags/decimal/>decimal</a></li><li><a href=/tags/decode/>decode</a></li><li><a href=/tags/collector/>collector</a></li><li><a href=/tags/hunting/>hunting</a></li><li><a href=/tags/labels/>labels</a></li><li><a href=/tags/forensics/>Forensics</a></li><li><a href=/tags/notebook/>Notebook</a></li><li><a href=/tags/encode/>encode</a></li><li><a href=/tags/url/>url</a></li><li><a href=/tags/gui/>GUI</a></li><li><a href=/tags/searching/>Searching</a></li><li><a href=/tags/admin/>admin</a></li><li><a href=/tags/automation/>automation</a></li><li><a href=/tags/sso/>sso</a></li><li><a href=/tags/debugging/>debugging</a></li><li><a href=/tags/asep/>ASEP</a></li><li><a href=/tags/etw/>ETW</a></li><li><a href=/tags/t1546.003/>T1546.003</a></li><li><a href=/tags/wmi/>WMI</a></li><li><a href=/tags/linux/>Linux</a></li><li><a href=/tags/aws/>AWS</a></li><li><a href=/tags/offline-collector/>Offline Collector</a></li><li><a href=/tags/cobalt-strike/>Cobalt Strike</a></li><li><a href=/tags/carving/>Carving</a></li><li><a href=/tags/usn/>USN</a></li><li><a href=/tags/windows/>Windows</a></li><li><a href=/tags/parsing/>Parsing</a></li><li><a href=/tags/security/>Security</a></li><li><a href=/tags/scalability/>Scalability</a></li><li><a href=/tags/server/>Server</a></li><li><a href=/tags/velociraptor/>Velociraptor</a></li><li><a href=/tags/memory/>Memory</a></li><li><a href=/tags/filesystems/>Filesystems</a></li><li><a href=/tags/osquery/>OSQuery</a></li><li><a href=/tags/logs/>Logs</a></li><li><a href=/tags/performance/>Performance</a></li><li><a href=/tags/integration/>Integration</a></li><li><a href=/tags/slack/>Slack</a></li><li><a href=/tags/internals/>Internals</a></li><li><a href=/tags/authentication/>Authentication</a></li><li><a href=/tags/tools/>Tools</a></li><li><a href=/tags/low-level/>Low level</a></li><li><a href=/tags/client-artifact/>Client Artifact</a></li><li><a href=/tags/client-event-artifact/>Client Event Artifact</a></li><li><a href=/tags/event/>event</a></li><li><a href=/tags/exploit/>exploit</a></li><li><a href=/tags/hijacking/>hijacking</a></li><li><a href=/tags/impacket/>impacket</a></li><li><a href=/tags/internal-artifact/>Internal Artifact</a></li><li><a href=/tags/registry/>registry</a></li><li><a href=/tags/server-artifact/>Server Artifact</a></li><li><a href=/tags/server-event-artifact/>Server Event Artifact</a></li><li><a href=/tags/services/>services</a></li><li><a href=/tags/vmware/>VMWare</a></li><li><a href=/tags/vrealize/>vRealize</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Tags</h1><ul><li><a href=/tags/random/>random</a></li><li><a href=/tags/vql/>VQL</a></li><li><a href=/tags/release/>Release</a></li><li><a href=/tags/archiving/>archiving</a></li><li><a href=/tags/deployment/>deployment</a></li><li><a href=/tags/orgs/>orgs</a></li><li><a href=/tags/configuration/>configuration</a></li><li><a href=/tags/detection/>Detection</a></li><li><a href=/tags/malware/>Malware</a></li><li><a href=/tags/qakbot/>Qakbot</a></li><li><a href=/tags/qbot/>QBot</a></li><li><a href=/tags/community/>Community</a></li><li><a href=/tags/containment/>containment</a></li><li><a href=/tags/quarantine/>quarantine</a></li><li><a href=/tags/decimal/>decimal</a></li><li><a href=/tags/decode/>decode</a></li><li><a href=/tags/collector/>collector</a></li><li><a href=/tags/hunting/>hunting</a></li><li><a href=/tags/labels/>labels</a></li><li><a href=/tags/forensics/>Forensics</a></li><li><a href=/tags/notebook/>Notebook</a></li><li><a href=/tags/encode/>encode</a></li><li><a href=/tags/url/>url</a></li><li><a href=/tags/gui/>GUI</a></li><li><a href=/tags/searching/>Searching</a></li><li><a href=/tags/admin/>admin</a></li><li><a href=/tags/automation/>automation</a></li><li><a href=/tags/sso/>sso</a></li><li><a href=/tags/debugging/>debugging</a></li><li><a href=/tags/asep/>ASEP</a></li><li><a href=/tags/etw/>ETW</a></li><li><a href=/tags/t1546.003/>T1546.003</a></li><li><a href=/tags/wmi/>WMI</a></li><li><a href=/tags/linux/>Linux</a></li><li><a href=/tags/aws/>AWS</a></li><li><a href=/tags/offline-collector/>Offline Collector</a></li><li><a href=/tags/cobalt-strike/>Cobalt Strike</a></li><li><a href=/tags/carving/>Carving</a></li><li><a href=/tags/usn/>USN</a></li><li><a href=/tags/windows/>Windows</a></li><li><a href=/tags/parsing/>Parsing</a></li><li><a href=/tags/security/>Security</a></li><li><a href=/tags/scalability/>Scalability</a></li><li><a href=/tags/server/>Server</a></li><li><a href=/tags/velociraptor/>Velociraptor</a></li><li><a href=/tags/memory/>Memory</a></li><li><a href=/tags/filesystems/>Filesystems</a></li><li><a href=/tags/osquery/>OSQuery</a></li><li><a href=/tags/logs/>Logs</a></li><li><a href=/tags/performance/>Performance</a></li><li><a href=/tags/integration/>Integration</a></li><li><a href=/tags/slack/>Slack</a></li><li><a href=/tags/internals/>Internals</a></li><li><a href=/tags/authentication/>Authentication</a></li><li><a href=/tags/tools/>Tools</a></li><li><a href=/tags/low-level/>Low level</a></li><li><a href=/tags/client-artifact/>Client Artifact</a></li><li><a href=/tags/client-event-artifact/>Client Event Artifact</a></li><li><a href=/tags/event/>event</a></li><li><a href=/tags/exploit/>exploit</a></li><li><a href=/tags/hijacking/>hijacking</a></li><li><a href=/tags/impacket/>impacket</a></li><li><a href=/tags/internal-artifact/>Internal Artifact</a></li><li><a href=/tags/registry/>registry</a></li><li><a href=/tags/server-artifact/>Server Artifact</a></li><li><a href=/tags/server-event-artifact/>Server Event Artifact</a></li><li><a href=/tags/services/>services</a></li><li><a href=/tags/vmware/>VMWare</a></li><li><a href=/tags/vrealize/>vRealize</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/integration/index.html b/tags/integration/index.html
index b6ff4bef57f..fcca5ae3b2b 100644
--- a/tags/integration/index.html
+++ b/tags/integration/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Integration :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/integration/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/integration/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Integration</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Integration</h1><ul><li><a href=/blog/2020/2020-12-26-slack-and-velociraptor-b63803ba4b16/>Slack and Velociraptor</a></li><li><a href=/blog/2020/2020-08-17-velociraptor-sso-authentication-6dd68d46dccf/>Velociraptor SSO Authentication</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Integration</h1><ul><li><a href=/blog/2020/2020-12-26-slack-and-velociraptor-b63803ba4b16/>Slack and Velociraptor</a></li><li><a href=/blog/2020/2020-08-17-velociraptor-sso-authentication-6dd68d46dccf/>Velociraptor SSO Authentication</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/internal-artifact/index.html b/tags/internal-artifact/index.html
index 70bd58b3d8c..ab8ced52068 100644
--- a/tags/internal-artifact/index.html
+++ b/tags/internal-artifact/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Internal Artifact :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/internal-artifact/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/internal-artifact/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Internal Artifact</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Internal Artifact</h1><ul><li><a href=/artifact_references/pages/server.internal.artifactdescription/>Server.Internal.ArtifactDescription</a></li><li><a href=/artifact_references/pages/server.internal.clientconflict/>Server.Internal.ClientConflict</a></li><li><a href=/artifact_references/pages/server.internal.clientinfo/>Server.Internal.ClientInfo</a></li><li><a href=/artifact_references/pages/server.internal.clientinfosnapshot/>Server.Internal.ClientInfoSnapshot</a></li><li><a href=/artifact_references/pages/server.internal.clientping/>Server.Internal.ClientPing</a></li><li><a href=/artifact_references/pages/server.internal.clienttasks/>Server.Internal.ClientTasks</a></li><li><a href=/artifact_references/pages/server.internal.enrollment/>Server.Internal.Enrollment</a></li><li><a href=/artifact_references/pages/server.internal.frontendmetrics/>Server.Internal.FrontendMetrics</a></li><li><a href=/artifact_references/pages/server.internal.huntmodification/>Server.Internal.HuntModification</a></li><li><a href=/artifact_references/pages/server.internal.huntupdate/>Server.Internal.HuntUpdate</a></li><li><a href=/artifact_references/pages/server.internal.interrogation/>Server.Internal.Interrogation</a></li><li><a href=/artifact_references/pages/server.internal.inventory/>Server.Internal.Inventory</a></li><li><a href=/artifact_references/pages/server.internal.label/>Server.Internal.Label</a></li><li><a href=/artifact_references/pages/server.internal.masterregistrations/>Server.Internal.MasterRegistrations</a></li><li><a href=/artifact_references/pages/server.internal.notifications/>Server.Internal.Notifications</a></li><li><a href=/artifact_references/pages/server.internal.ping/>Server.Internal.Ping</a></li><li><a href=/artifact_references/pages/server.internal.pong/>Server.Internal.Pong</a></li><li><a href=/artifact_references/pages/system.hunt.participation/>System.Hunt.Participation</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Internal Artifact</h1><ul><li><a href=/artifact_references/pages/server.internal.artifactdescription/>Server.Internal.ArtifactDescription</a></li><li><a href=/artifact_references/pages/server.internal.clientconflict/>Server.Internal.ClientConflict</a></li><li><a href=/artifact_references/pages/server.internal.clientinfo/>Server.Internal.ClientInfo</a></li><li><a href=/artifact_references/pages/server.internal.clientinfosnapshot/>Server.Internal.ClientInfoSnapshot</a></li><li><a href=/artifact_references/pages/server.internal.clientping/>Server.Internal.ClientPing</a></li><li><a href=/artifact_references/pages/server.internal.clienttasks/>Server.Internal.ClientTasks</a></li><li><a href=/artifact_references/pages/server.internal.enrollment/>Server.Internal.Enrollment</a></li><li><a href=/artifact_references/pages/server.internal.frontendmetrics/>Server.Internal.FrontendMetrics</a></li><li><a href=/artifact_references/pages/server.internal.huntmodification/>Server.Internal.HuntModification</a></li><li><a href=/artifact_references/pages/server.internal.huntupdate/>Server.Internal.HuntUpdate</a></li><li><a href=/artifact_references/pages/server.internal.interrogation/>Server.Internal.Interrogation</a></li><li><a href=/artifact_references/pages/server.internal.inventory/>Server.Internal.Inventory</a></li><li><a href=/artifact_references/pages/server.internal.label/>Server.Internal.Label</a></li><li><a href=/artifact_references/pages/server.internal.masterregistrations/>Server.Internal.MasterRegistrations</a></li><li><a href=/artifact_references/pages/server.internal.notifications/>Server.Internal.Notifications</a></li><li><a href=/artifact_references/pages/server.internal.ping/>Server.Internal.Ping</a></li><li><a href=/artifact_references/pages/server.internal.pong/>Server.Internal.Pong</a></li><li><a href=/artifact_references/pages/system.hunt.participation/>System.Hunt.Participation</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/internals/index.html b/tags/internals/index.html
index dce723dabbf..dfa5e7dccfe 100644
--- a/tags/internals/index.html
+++ b/tags/internals/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Internals :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/internals/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/internals/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Internals</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Internals</h1><ul><li><a href=/blog/2020/2020-09-28-velociraptor-network-communications-30568624043a/>Velociraptor Communications</a></li><li><a href=/blog/2020/2020-08-16-profiling-the-beast-58913437fd16/>Profiling the beast</a></li><li><a href=/blog/2020/2020-07-13-velociraptor-in-the-tool-age-d896dfe71b9/>Velociraptor in the tool age</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Internals</h1><ul><li><a href=/blog/2020/2020-09-28-velociraptor-network-communications-30568624043a/>Velociraptor Communications</a></li><li><a href=/blog/2020/2020-08-16-profiling-the-beast-58913437fd16/>Profiling the beast</a></li><li><a href=/blog/2020/2020-07-13-velociraptor-in-the-tool-age-d896dfe71b9/>Velociraptor in the tool age</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/labels/index.html b/tags/labels/index.html
index 54a751b605a..d4dcd248a27 100644
--- a/tags/labels/index.html
+++ b/tags/labels/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>labels :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/labels/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/labels/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>labels</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-labels</h1><ul><li><a href=/knowledge_base/tips/hunt_by_label/>How to control hunting by label groups?</a></li><li><a href=/knowledge_base/tips/huntlabel/>Applying labels to hunt results</a></li><li><a href=/knowledge_base/tips/automating_labels/>How can I automatically apply labels to clients?</a></li><li><a href=/exchange/artifacts/pages/exchange.label.user/>Exchange.Label.User</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+labels</h1><ul><li><a href=/knowledge_base/tips/hunt_by_label/>How to control hunting by label groups?</a></li><li><a href=/knowledge_base/tips/huntlabel/>Applying labels to hunt results</a></li><li><a href=/knowledge_base/tips/automating_labels/>How can I automatically apply labels to clients?</a></li><li><a href=/exchange/artifacts/pages/exchange.label.user/>Exchange.Label.User</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/linux/index.html b/tags/linux/index.html
index 851b107b151..874d7c2be37 100644
--- a/tags/linux/index.html
+++ b/tags/linux/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/linux/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/linux/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Linux</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Linux</h1><ul><li><a href=/blog/2022/2022-01-05-searching-for-files-on-linux/>Searching for files</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Linux</h1><ul><li><a href=/blog/2022/2022-01-05-searching-for-files-on-linux/>Searching for files</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/logs/index.html b/tags/logs/index.html
index 3c848d4c01b..032cc064ef7 100644
--- a/tags/logs/index.html
+++ b/tags/logs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Logs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/logs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/logs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Logs</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Logs</h1><ul><li><a href=/blog/2021/2021-01-29-disabled-event-log-files-a3529a08adbe/>Disabled Event Log files</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Logs</h1><ul><li><a href=/blog/2021/2021-01-29-disabled-event-log-files-a3529a08adbe/>Disabled Event Log files</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/low-level/index.html b/tags/low-level/index.html
index d89022588ec..11803d8d071 100644
--- a/tags/low-level/index.html
+++ b/tags/low-level/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Low level :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/low-level/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/low-level/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Low level</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Low level</h1><ul><li><a href=/blog/2020/2020-06-19-the-velociraptor-query-language-pt-2-fe92bb7aa150/>The Velociraptor Query Language Pt 2</a></li><li><a href=/blog/2020/2020-06-14-the-velociraptor-query-language-pt-1-d721bff100bf/>The Velociraptor Query Language Pt 1</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Low level</h1><ul><li><a href=/blog/2020/2020-06-19-the-velociraptor-query-language-pt-2-fe92bb7aa150/>The Velociraptor Query Language Pt 2</a></li><li><a href=/blog/2020/2020-06-14-the-velociraptor-query-language-pt-1-d721bff100bf/>The Velociraptor Query Language Pt 1</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/malware/index.html b/tags/malware/index.html
index c7f22ce6160..954638ffe10 100644
--- a/tags/malware/index.html
+++ b/tags/malware/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Malware :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/malware/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/malware/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Malware</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Malware</h1><ul><li><a href=/blog/2023/2023-04-05-qakbot/>Automating Qakbot decode at scale</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Malware</h1><ul><li><a href=/blog/2023/2023-04-05-qakbot/>Automating Qakbot decode at scale</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/memory/index.html b/tags/memory/index.html
index 453fcdcbcca..c92301f2c7c 100644
--- a/tags/memory/index.html
+++ b/tags/memory/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Memory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/memory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/memory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Memory</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Memory</h1><ul><li><a href=/blog/2021/2021-04-16-digging-into-process-memory-33c60a640cdb/>Digging into process memory</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Memory</h1><ul><li><a href=/blog/2021/2021-04-16-digging-into-process-memory-33c60a640cdb/>Digging into process memory</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/notebook/index.html b/tags/notebook/index.html
index f6a1a524fed..0070e6a601e 100644
--- a/tags/notebook/index.html
+++ b/tags/notebook/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Notebook :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/notebook/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/notebook/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Notebook</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Notebook</h1><ul><li><a href=/blog/2022/2022-08-04-post-processing/>Postprocessing Collections</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Notebook</h1><ul><li><a href=/blog/2022/2022-08-04-post-processing/>Postprocessing Collections</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/offline-collector/index.html b/tags/offline-collector/index.html
index 8eb3a7576f9..cb158318624 100644
--- a/tags/offline-collector/index.html
+++ b/tags/offline-collector/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Offline Collector :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/offline-collector/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/offline-collector/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Offline Collector</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Offline Collector</h1><ul><li><a href=/blog/2021/2021-12-11-sftp-in-aws/>SFTP in AWS</a></li><li><a href=/blog/2020/2020-07-14-triage-with-velociraptor-pt-4-cf0e60810d1e/>Triage with Velociraptor — Pt 4</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Offline Collector</h1><ul><li><a href=/blog/2021/2021-12-11-sftp-in-aws/>SFTP in AWS</a></li><li><a href=/blog/2020/2020-07-14-triage-with-velociraptor-pt-4-cf0e60810d1e/>Triage with Velociraptor — Pt 4</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/orgs/index.html b/tags/orgs/index.html
index 8ed6322b255..8580eb5386b 100644
--- a/tags/orgs/index.html
+++ b/tags/orgs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>orgs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/orgs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/orgs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>orgs</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-orgs</h1><ul><li><a href=/knowledge_base/tips/clone_organization_to_other_server/>How can I clone an organization with all its hunts and artifacts to another instance?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+orgs</h1><ul><li><a href=/knowledge_base/tips/clone_organization_to_other_server/>How can I clone an organization with all its hunts and artifacts to another instance?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/osquery/index.html b/tags/osquery/index.html
index dc522365646..8bc7a44f10e 100644
--- a/tags/osquery/index.html
+++ b/tags/osquery/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>OSQuery :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/osquery/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/osquery/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>OSQuery</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-OSQuery</h1><ul><li><a href=/blog/2021/2021-02-03-migrating-from-osquery-to-velociraptor-d4143799953f/>Migrating from OSQuery to Velociraptor</a></li><li><a href=/blog/2020/2020-12-13-velociraptor-and-osquery-2a4306dd23c/>Velociraptor and OSQuery</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+OSQuery</h1><ul><li><a href=/blog/2021/2021-02-03-migrating-from-osquery-to-velociraptor-d4143799953f/>Migrating from OSQuery to Velociraptor</a></li><li><a href=/blog/2020/2020-12-13-velociraptor-and-osquery-2a4306dd23c/>Velociraptor and OSQuery</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/parsing/index.html b/tags/parsing/index.html
index 976227e1e8e..ba06a1b8f6e 100644
--- a/tags/parsing/index.html
+++ b/tags/parsing/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Parsing :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/parsing/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/parsing/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Parsing</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Parsing</h1><ul><li><a href=/blog/2021/2021-06-09-verifying-executables-on-windows-1b3518122d3c/>Verifying executables on Windows</a></li><li><a href=/blog/2021/2021-01-19-parsing-binary-files-d31114a41f14/>Parsing binary files</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Parsing</h1><ul><li><a href=/blog/2021/2021-06-09-verifying-executables-on-windows-1b3518122d3c/>Verifying executables on Windows</a></li><li><a href=/blog/2021/2021-01-19-parsing-binary-files-d31114a41f14/>Parsing binary files</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/performance/index.html b/tags/performance/index.html
index fc295ddfd4c..189147306ae 100644
--- a/tags/performance/index.html
+++ b/tags/performance/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Performance :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/performance/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/performance/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Performance</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Performance</h1><ul><li><a href=/blog/2021/2021-01-22-concurrent-vql-6d381fdb0b1f/>Concurrent VQL</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Performance</h1><ul><li><a href=/blog/2021/2021-01-22-concurrent-vql-6d381fdb0b1f/>Concurrent VQL</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/qakbot/index.html b/tags/qakbot/index.html
index 66584c32902..45b94579022 100644
--- a/tags/qakbot/index.html
+++ b/tags/qakbot/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Qakbot :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/qakbot/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/qakbot/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Qakbot</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Qakbot</h1><ul><li><a href=/blog/2023/2023-04-05-qakbot/>Automating Qakbot decode at scale</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Qakbot</h1><ul><li><a href=/blog/2023/2023-04-05-qakbot/>Automating Qakbot decode at scale</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/qbot/index.html b/tags/qbot/index.html
index 2abdf341841..46f27e9259b 100644
--- a/tags/qbot/index.html
+++ b/tags/qbot/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>QBot :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/qbot/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/qbot/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>QBot</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-QBot</h1><ul><li><a href=/blog/2023/2023-04-05-qakbot/>Automating Qakbot decode at scale</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+QBot</h1><ul><li><a href=/blog/2023/2023-04-05-qakbot/>Automating Qakbot decode at scale</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/quarantine/index.html b/tags/quarantine/index.html
index 5563de5976a..27365481b21 100644
--- a/tags/quarantine/index.html
+++ b/tags/quarantine/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>quarantine :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/quarantine/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/quarantine/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>quarantine</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-quarantine</h1><ul><li><a href=/knowledge_base/tips/quarantine/>Custom quarantine exclusions</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+quarantine</h1><ul><li><a href=/knowledge_base/tips/quarantine/>Custom quarantine exclusions</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/random/index.html b/tags/random/index.html
index d6d2559710f..63827edc655 100644
--- a/tags/random/index.html
+++ b/tags/random/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>random :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/random/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/random/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>random</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-random</h1><ul><li><a href=/knowledge_base/tips/random/>How do you generate random characters?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+random</h1><ul><li><a href=/knowledge_base/tips/random/>How do you generate random characters?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/registry/index.html b/tags/registry/index.html
index 12f0cfaec36..cc9513918b0 100644
--- a/tags/registry/index.html
+++ b/tags/registry/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>registry :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/registry/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/registry/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>registry</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-registry</h1><ul><li><a href=/exchange/artifacts/pages/hash_run_keys/>HashRunKeys</a></li><li><a href=/exchange/artifacts/pages/windows.registry.capabilityaccessmanager/>Windows.Registry.CapabilityAccessManager</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+registry</h1><ul><li><a href=/exchange/artifacts/pages/hash_run_keys/>HashRunKeys</a></li><li><a href=/exchange/artifacts/pages/windows.registry.capabilityaccessmanager/>Windows.Registry.CapabilityAccessManager</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/release/index.html b/tags/release/index.html
index 03f85710c84..93cb8b5bac4 100644
--- a/tags/release/index.html
+++ b/tags/release/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Release :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/release/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/release/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Release</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Release</h1><ul><li><a href=/blog/2023/2023-07-27-release-notes-0.7.0/>Velociraptor 0.7.0 Release</a></li><li><a href=/blog/2023/2023-05-05-release-notes-0.6.9/>Velociraptor 0.6.9 Release</a></li><li><a href=/blog/2023/2023-02-13-release-notes-0.6.8/>Velociraptor 0.6.8 Release</a></li><li><a href=/blog/2022/2022-11-21-release-notes/>Velociraptor 0.6.7 Release</a></li><li><a href=/blog/2022/2022-08-15-release-notes/>Velociraptor 0.6.6 Release</a></li><li><a href=/blog/2022/2022-06-21-release-notes/>Velociraptor 0.6.5 Release</a></li><li><a href=/blog/2022/2022-03-23-release-notes/>Velociraptor 0.6.4 Release</a></li><li><a href=/blog/2022/2022-01-05-release-notes-0.6.3/>Velociraptor 0.6.3 Release</a></li><li><a href=/blog/2021/2021-09-17-carlos-intro/>Welcome to Velociraptor, Carlos</a></li><li><a href=/blog/2021/2021-09-07-release-notes-0.6.1/>Velociraptor 0.6.1 Release</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Release</h1><ul><li><a href=/blog/2023/2023-07-27-release-notes-0.7.0/>Velociraptor 0.7.0 Release</a></li><li><a href=/blog/2023/2023-05-05-release-notes-0.6.9/>Velociraptor 0.6.9 Release</a></li><li><a href=/blog/2023/2023-02-13-release-notes-0.6.8/>Velociraptor 0.6.8 Release</a></li><li><a href=/blog/2022/2022-11-21-release-notes/>Velociraptor 0.6.7 Release</a></li><li><a href=/blog/2022/2022-08-15-release-notes/>Velociraptor 0.6.6 Release</a></li><li><a href=/blog/2022/2022-06-21-release-notes/>Velociraptor 0.6.5 Release</a></li><li><a href=/blog/2022/2022-03-23-release-notes/>Velociraptor 0.6.4 Release</a></li><li><a href=/blog/2022/2022-01-05-release-notes-0.6.3/>Velociraptor 0.6.3 Release</a></li><li><a href=/blog/2021/2021-09-17-carlos-intro/>Welcome to Velociraptor, Carlos</a></li><li><a href=/blog/2021/2021-09-07-release-notes-0.6.1/>Velociraptor 0.6.1 Release</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/scalability/index.html b/tags/scalability/index.html
index 4caad493a7a..6ef3a0a60b7 100644
--- a/tags/scalability/index.html
+++ b/tags/scalability/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Scalability :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/scalability/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/scalability/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Scalability</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Scalability</h1><ul><li><a href=/blog/2021/2021-04-29-scaling-velociraptor-57acc4df76ed/>Scaling Velociraptor</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Scalability</h1><ul><li><a href=/blog/2021/2021-04-29-scaling-velociraptor-57acc4df76ed/>Scaling Velociraptor</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/searching/index.html b/tags/searching/index.html
index 601d601db9f..d1f849acef4 100644
--- a/tags/searching/index.html
+++ b/tags/searching/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Searching :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/searching/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/searching/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Searching</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Searching</h1><ul><li><a href=/knowledge_base/tips/registry_finder/>How do I search for registry keys</a></li><li><a href=/blog/2022/2022-01-05-searching-for-files-on-linux/>Searching for files</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Searching</h1><ul><li><a href=/knowledge_base/tips/registry_finder/>How do I search for registry keys</a></li><li><a href=/blog/2022/2022-01-05-searching-for-files-on-linux/>Searching for files</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/security/index.html b/tags/security/index.html
index c6b254c760c..6f4f6e52e15 100644
--- a/tags/security/index.html
+++ b/tags/security/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Security :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/security/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/security/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Security</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Security</h1><ul><li><a href=/blog/2021/2021-06-09-verifying-executables-on-windows-1b3518122d3c/>Verifying executables on Windows</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Security</h1><ul><li><a href=/blog/2021/2021-06-09-verifying-executables-on-windows-1b3518122d3c/>Verifying executables on Windows</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/server-artifact/index.html b/tags/server-artifact/index.html
index f68022eb6c5..8204bca6319 100644
--- a/tags/server-artifact/index.html
+++ b/tags/server-artifact/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server Artifact :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/server-artifact/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/server-artifact/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Server Artifact</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Server Artifact</h1><ul><li><a href=/artifact_references/pages/admin.client.remove/>Admin.Client.Remove</a></li><li><a href=/artifact_references/pages/reporting.default/>Reporting.Default</a></li><li><a href=/artifact_references/pages/reporting.hunts.details/>Reporting.Hunts.Details</a></li><li><a href=/artifact_references/pages/server.enrichment.cortexanalyzer/>Server.Enrichment.CortexAnalyzer</a></li><li><a href=/artifact_references/pages/server.enrichment.greynoise/>Server.Enrichment.GreyNoise</a></li><li><a href=/artifact_references/pages/server.enrichment.hybridanalysis/>Server.Enrichment.HybridAnalysis</a></li><li><a href=/artifact_references/pages/server.enrichment.virustotal/>Server.Enrichment.Virustotal</a></li><li><a href=/artifact_references/pages/server.hunts.addflow/>Server.Hunts.AddFlow</a></li><li><a href=/artifact_references/pages/server.hunts.cancelanddelete/>Server.Hunts.CancelAndDelete</a></li><li><a href=/artifact_references/pages/server.hunts.list/>Server.Hunts.List</a></li><li><a href=/artifact_references/pages/server.hunts.results/>Server.Hunts.Results</a></li><li><a href=/artifact_references/pages/server.import.artifactexchange/>Server.Import.ArtifactExchange</a></li><li><a href=/artifact_references/pages/server.import.deleteartifacts/>Server.Import.DeleteArtifacts</a></li><li><a href=/artifact_references/pages/server.import.previousreleases/>Server.Import.PreviousReleases</a></li><li><a href=/artifact_references/pages/server.information.clients/>Server.Information.Clients</a></li><li><a href=/artifact_references/pages/server.information.users/>Server.Information.Users</a></li><li><a href=/artifact_references/pages/server.internal.welcome/>Server.Internal.Welcome</a></li><li><a href=/artifact_references/pages/server.monitor.profile/>Server.Monitor.Profile</a></li><li><a href=/artifact_references/pages/server.monitor.velometrics/>Server.Monitor.VeloMetrics</a></li><li><a href=/artifact_references/pages/server.orgs.listorgs/>Server.Orgs.ListOrgs</a></li><li><a href=/artifact_references/pages/server.orgs.neworg/>Server.Orgs.NewOrg</a></li><li><a href=/artifact_references/pages/server.utils.addtimeline/>Server.Utils.AddTimeline</a></li><li><a href=/artifact_references/pages/server.utils.adduser/>Server.Utils.AddUser</a></li><li><a href=/artifact_references/pages/server.utils.cancelhunt/>Server.Utils.CancelHunt</a></li><li><a href=/artifact_references/pages/server.utils.collectclient/>Server.Utils.CollectClient</a></li><li><a href=/artifact_references/pages/server.utils.createcollector/>Server.Utils.CreateCollector</a></li><li><a href=/artifact_references/pages/server.utils.createmsi/>Server.Utils.CreateMSI</a></li><li><a href=/artifact_references/pages/server.utils.deleteclient/>Server.Utils.DeleteClient</a></li><li><a href=/artifact_references/pages/server.utils.deleteevents/>Server.Utils.DeleteEvents</a></li><li><a href=/artifact_references/pages/server.utils.deleteflow/>Server.Utils.DeleteFlow</a></li><li><a href=/artifact_references/pages/server.utils.deletemanyflows/>Server.Utils.DeleteManyFlows</a></li><li><a href=/artifact_references/pages/server.utils.deletemonitoringdata/>Server.Utils.DeleteMonitoringData</a></li><li><a href=/artifact_references/pages/server.utils.deletenotebook/>Server.Utils.DeleteNotebook</a></li><li><a href=/artifact_references/pages/server.utils.importcollection/>Server.Utils.ImportCollection</a></li><li><a href=/artifact_references/pages/server.utils.listusers/>Server.Utils.ListUsers</a></li><li><a href=/artifact_references/pages/windows.kapefiles.extract/>Windows.KapeFiles.Extract</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Server Artifact</h1><ul><li><a href=/artifact_references/pages/admin.client.remove/>Admin.Client.Remove</a></li><li><a href=/artifact_references/pages/reporting.default/>Reporting.Default</a></li><li><a href=/artifact_references/pages/reporting.hunts.details/>Reporting.Hunts.Details</a></li><li><a href=/artifact_references/pages/server.enrichment.cortexanalyzer/>Server.Enrichment.CortexAnalyzer</a></li><li><a href=/artifact_references/pages/server.enrichment.greynoise/>Server.Enrichment.GreyNoise</a></li><li><a href=/artifact_references/pages/server.enrichment.hybridanalysis/>Server.Enrichment.HybridAnalysis</a></li><li><a href=/artifact_references/pages/server.enrichment.virustotal/>Server.Enrichment.Virustotal</a></li><li><a href=/artifact_references/pages/server.hunts.addflow/>Server.Hunts.AddFlow</a></li><li><a href=/artifact_references/pages/server.hunts.cancelanddelete/>Server.Hunts.CancelAndDelete</a></li><li><a href=/artifact_references/pages/server.hunts.list/>Server.Hunts.List</a></li><li><a href=/artifact_references/pages/server.hunts.results/>Server.Hunts.Results</a></li><li><a href=/artifact_references/pages/server.import.artifactexchange/>Server.Import.ArtifactExchange</a></li><li><a href=/artifact_references/pages/server.import.deleteartifacts/>Server.Import.DeleteArtifacts</a></li><li><a href=/artifact_references/pages/server.import.previousreleases/>Server.Import.PreviousReleases</a></li><li><a href=/artifact_references/pages/server.information.clients/>Server.Information.Clients</a></li><li><a href=/artifact_references/pages/server.information.users/>Server.Information.Users</a></li><li><a href=/artifact_references/pages/server.internal.welcome/>Server.Internal.Welcome</a></li><li><a href=/artifact_references/pages/server.monitor.profile/>Server.Monitor.Profile</a></li><li><a href=/artifact_references/pages/server.monitor.velometrics/>Server.Monitor.VeloMetrics</a></li><li><a href=/artifact_references/pages/server.orgs.listorgs/>Server.Orgs.ListOrgs</a></li><li><a href=/artifact_references/pages/server.orgs.neworg/>Server.Orgs.NewOrg</a></li><li><a href=/artifact_references/pages/server.utils.addtimeline/>Server.Utils.AddTimeline</a></li><li><a href=/artifact_references/pages/server.utils.adduser/>Server.Utils.AddUser</a></li><li><a href=/artifact_references/pages/server.utils.cancelhunt/>Server.Utils.CancelHunt</a></li><li><a href=/artifact_references/pages/server.utils.collectclient/>Server.Utils.CollectClient</a></li><li><a href=/artifact_references/pages/server.utils.createcollector/>Server.Utils.CreateCollector</a></li><li><a href=/artifact_references/pages/server.utils.createmsi/>Server.Utils.CreateMSI</a></li><li><a href=/artifact_references/pages/server.utils.deleteclient/>Server.Utils.DeleteClient</a></li><li><a href=/artifact_references/pages/server.utils.deleteevents/>Server.Utils.DeleteEvents</a></li><li><a href=/artifact_references/pages/server.utils.deleteflow/>Server.Utils.DeleteFlow</a></li><li><a href=/artifact_references/pages/server.utils.deletemanyflows/>Server.Utils.DeleteManyFlows</a></li><li><a href=/artifact_references/pages/server.utils.deletemonitoringdata/>Server.Utils.DeleteMonitoringData</a></li><li><a href=/artifact_references/pages/server.utils.deletenotebook/>Server.Utils.DeleteNotebook</a></li><li><a href=/artifact_references/pages/server.utils.importcollection/>Server.Utils.ImportCollection</a></li><li><a href=/artifact_references/pages/server.utils.listusers/>Server.Utils.ListUsers</a></li><li><a href=/artifact_references/pages/windows.kapefiles.extract/>Windows.KapeFiles.Extract</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/server-event-artifact/index.html b/tags/server-event-artifact/index.html
index 9894e48a101..97c4143ee50 100644
--- a/tags/server-event-artifact/index.html
+++ b/tags/server-event-artifact/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server Event Artifact :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/server-event-artifact/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/server-event-artifact/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Server Event Artifact</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Server Event Artifact</h1><ul><li><a href=/artifact_references/pages/admin.events.postprocessuploads/>Admin.Events.PostProcessUploads</a></li><li><a href=/artifact_references/pages/admin.system.compressuploads/>Admin.System.CompressUploads</a></li><li><a href=/artifact_references/pages/elastic.events.clients/>Elastic.Events.Clients</a></li><li><a href=/artifact_references/pages/elastic.events.upload/>Elastic.Events.Upload</a></li><li><a href=/artifact_references/pages/elastic.flows.upload/>Elastic.Flows.Upload</a></li><li><a href=/artifact_references/pages/generic.forensic.hashlookup/>Generic.Forensic.HashLookup</a></li><li><a href=/artifact_references/pages/logscale.events.clients/>LogScale.Events.Clients</a></li><li><a href=/artifact_references/pages/logscale.flows.upload/>LogScale.Flows.Upload</a></li><li><a href=/artifact_references/pages/server.alerts.notification/>Server.Alerts.Notification</a></li><li><a href=/artifact_references/pages/server.alerts.processcreation/>Server.Alerts.ProcessCreation</a></li><li><a href=/artifact_references/pages/server.alerts.psexec/>Server.Alerts.PsExec</a></li><li><a href=/artifact_references/pages/server.alerts.thehive.alert/>Server.Alerts.TheHive.Alert</a></li><li><a href=/artifact_references/pages/server.alerts.thehive.case/>Server.Alerts.TheHive.Case</a></li><li><a href=/artifact_references/pages/server.alerts.trackaccount/>Server.Alerts.Trackaccount</a></li><li><a href=/artifact_references/pages/server.alerts.winpmem/>Server.Alerts.WinPmem</a></li><li><a href=/artifact_references/pages/server.audit.logs/>Server.Audit.Logs</a></li><li><a href=/artifact_references/pages/server.internal.alerts/>Server.Internal.Alerts</a></li><li><a href=/artifact_references/pages/server.internal.artifactmodification/>Server.Internal.ArtifactModification</a></li><li><a href=/artifact_references/pages/server.internal.clientdelete/>Server.Internal.ClientDelete</a></li><li><a href=/artifact_references/pages/server.internal.interrogate/>Server.Internal.Interrogate</a></li><li><a href=/artifact_references/pages/server.internal.metadatamodifications/>Server.Internal.MetadataModifications</a></li><li><a href=/artifact_references/pages/server.monitor.clientconflict/>Server.Monitor.ClientConflict</a></li><li><a href=/artifact_references/pages/server.monitor.health/>Server.Monitor.Health</a></li><li><a href=/artifact_references/pages/server.monitor.shell/>Server.Monitor.Shell</a></li><li><a href=/artifact_references/pages/server.monitoring.clientcount/>Server.Monitoring.ClientCount</a></li><li><a href=/artifact_references/pages/server.monitoring.schedulehunt/>Server.Monitoring.ScheduleHunt</a></li><li><a href=/artifact_references/pages/server.powershell.encodedcommand/>Server.Powershell.EncodedCommand</a></li><li><a href=/artifact_references/pages/server.slack.clients.online/>Server.Slack.Clients.Online</a></li><li><a href=/artifact_references/pages/server.utils.backupdirectory/>Server.Utils.BackupDirectory</a></li><li><a href=/artifact_references/pages/server.utils.backupgcs/>Server.Utils.BackupGCS</a></li><li><a href=/artifact_references/pages/server.utils.backups3/>Server.Utils.BackupS3</a></li><li><a href=/artifact_references/pages/splunk.flows.upload/>Splunk.Flows.Upload</a></li><li><a href=/artifact_references/pages/system.hunt.creation/>System.Hunt.Creation</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Server Event Artifact</h1><ul><li><a href=/artifact_references/pages/admin.events.postprocessuploads/>Admin.Events.PostProcessUploads</a></li><li><a href=/artifact_references/pages/admin.system.compressuploads/>Admin.System.CompressUploads</a></li><li><a href=/artifact_references/pages/elastic.events.clients/>Elastic.Events.Clients</a></li><li><a href=/artifact_references/pages/elastic.events.upload/>Elastic.Events.Upload</a></li><li><a href=/artifact_references/pages/elastic.flows.upload/>Elastic.Flows.Upload</a></li><li><a href=/artifact_references/pages/generic.forensic.hashlookup/>Generic.Forensic.HashLookup</a></li><li><a href=/artifact_references/pages/logscale.events.clients/>LogScale.Events.Clients</a></li><li><a href=/artifact_references/pages/logscale.flows.upload/>LogScale.Flows.Upload</a></li><li><a href=/artifact_references/pages/server.alerts.notification/>Server.Alerts.Notification</a></li><li><a href=/artifact_references/pages/server.alerts.processcreation/>Server.Alerts.ProcessCreation</a></li><li><a href=/artifact_references/pages/server.alerts.psexec/>Server.Alerts.PsExec</a></li><li><a href=/artifact_references/pages/server.alerts.thehive.alert/>Server.Alerts.TheHive.Alert</a></li><li><a href=/artifact_references/pages/server.alerts.thehive.case/>Server.Alerts.TheHive.Case</a></li><li><a href=/artifact_references/pages/server.alerts.trackaccount/>Server.Alerts.Trackaccount</a></li><li><a href=/artifact_references/pages/server.alerts.winpmem/>Server.Alerts.WinPmem</a></li><li><a href=/artifact_references/pages/server.audit.logs/>Server.Audit.Logs</a></li><li><a href=/artifact_references/pages/server.internal.alerts/>Server.Internal.Alerts</a></li><li><a href=/artifact_references/pages/server.internal.artifactmodification/>Server.Internal.ArtifactModification</a></li><li><a href=/artifact_references/pages/server.internal.clientdelete/>Server.Internal.ClientDelete</a></li><li><a href=/artifact_references/pages/server.internal.interrogate/>Server.Internal.Interrogate</a></li><li><a href=/artifact_references/pages/server.internal.metadatamodifications/>Server.Internal.MetadataModifications</a></li><li><a href=/artifact_references/pages/server.monitor.clientconflict/>Server.Monitor.ClientConflict</a></li><li><a href=/artifact_references/pages/server.monitor.health/>Server.Monitor.Health</a></li><li><a href=/artifact_references/pages/server.monitor.shell/>Server.Monitor.Shell</a></li><li><a href=/artifact_references/pages/server.monitoring.clientcount/>Server.Monitoring.ClientCount</a></li><li><a href=/artifact_references/pages/server.monitoring.schedulehunt/>Server.Monitoring.ScheduleHunt</a></li><li><a href=/artifact_references/pages/server.powershell.encodedcommand/>Server.Powershell.EncodedCommand</a></li><li><a href=/artifact_references/pages/server.slack.clients.online/>Server.Slack.Clients.Online</a></li><li><a href=/artifact_references/pages/server.utils.backupdirectory/>Server.Utils.BackupDirectory</a></li><li><a href=/artifact_references/pages/server.utils.backupgcs/>Server.Utils.BackupGCS</a></li><li><a href=/artifact_references/pages/server.utils.backups3/>Server.Utils.BackupS3</a></li><li><a href=/artifact_references/pages/splunk.flows.upload/>Splunk.Flows.Upload</a></li><li><a href=/artifact_references/pages/system.hunt.creation/>System.Hunt.Creation</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/server/index.html b/tags/server/index.html
index 431ab76a86e..7183ebabcb0 100644
--- a/tags/server/index.html
+++ b/tags/server/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/server/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/server/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Server</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Server</h1><ul><li><a href=/blog/2021/2021-04-29-scaling-velociraptor-57acc4df76ed/>Scaling Velociraptor</a></li><li><a href=/exchange/artifacts/pages/exchange.label.user/>Exchange.Label.User</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Server</h1><ul><li><a href=/blog/2021/2021-04-29-scaling-velociraptor-57acc4df76ed/>Scaling Velociraptor</a></li><li><a href=/exchange/artifacts/pages/exchange.label.user/>Exchange.Label.User</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/services/index.html b/tags/services/index.html
index d16b8741535..855dd87f71b 100644
--- a/tags/services/index.html
+++ b/tags/services/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>services :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/services/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/services/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>services</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-services</h1><ul><li><a href=/exchange/artifacts/pages/windows.services.hijacking/>Custom.Windows.Services.Hijacking</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+services</h1><ul><li><a href=/exchange/artifacts/pages/windows.services.hijacking/>Custom.Windows.Services.Hijacking</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/slack/index.html b/tags/slack/index.html
index d48fd23fe23..ca7b8966764 100644
--- a/tags/slack/index.html
+++ b/tags/slack/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Slack :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/slack/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/slack/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Slack</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Slack</h1><ul><li><a href=/blog/2020/2020-12-26-slack-and-velociraptor-b63803ba4b16/>Slack and Velociraptor</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Slack</h1><ul><li><a href=/blog/2020/2020-12-26-slack-and-velociraptor-b63803ba4b16/>Slack and Velociraptor</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/sso/index.html b/tags/sso/index.html
index d374aae39a7..ecc9c2dc31a 100644
--- a/tags/sso/index.html
+++ b/tags/sso/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>sso :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/sso/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/sso/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>sso</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-sso</h1><ul><li><a href=/knowledge_base/tips/multiple_oauth/>How can I configure Velociraptor for multiple SSO providers</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+sso</h1><ul><li><a href=/knowledge_base/tips/multiple_oauth/>How can I configure Velociraptor for multiple SSO providers</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/t1546.003/index.html b/tags/t1546.003/index.html
index 3be241928eb..9041757bdef 100644
--- a/tags/t1546.003/index.html
+++ b/tags/t1546.003/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>T1546.003 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/t1546.003/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/t1546.003/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>T1546.003</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-T1546.003</h1><ul><li><a href=/blog/2022/2022-01-12-wmi-eventing/>WMI Event Consumers: what are you missing?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+T1546.003</h1><ul><li><a href=/blog/2022/2022-01-12-wmi-eventing/>WMI Event Consumers: what are you missing?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/tools/index.html b/tags/tools/index.html
index 6da9a37edfe..582c861c4af 100644
--- a/tags/tools/index.html
+++ b/tags/tools/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Tools :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/tools/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/tools/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Tools</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Tools</h1><ul><li><a href=/blog/2020/2020-07-13-velociraptor-in-the-tool-age-d896dfe71b9/>Velociraptor in the tool age</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Tools</h1><ul><li><a href=/blog/2020/2020-07-13-velociraptor-in-the-tool-age-d896dfe71b9/>Velociraptor in the tool age</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/url/index.html b/tags/url/index.html
index d4d9e563f61..210643fdd94 100644
--- a/tags/url/index.html
+++ b/tags/url/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>url :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/url/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/url/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>url</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-url</h1><ul><li><a href=/knowledge_base/tips/urldecode/>How can I url/percent decode a string?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+url</h1><ul><li><a href=/knowledge_base/tips/urldecode/>How can I url/percent decode a string?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/usn/index.html b/tags/usn/index.html
index 8fee0266311..cf7ec432095 100644
--- a/tags/usn/index.html
+++ b/tags/usn/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>USN :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/usn/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/usn/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>USN</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-USN</h1><ul><li><a href=/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/>Carving $USN journal entries</a></li><li><a href=/blog/2020/2020-11-13-the-windows-usn-journal-f0c55c9010e/>The Windows USN Journal</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+USN</h1><ul><li><a href=/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/>Carving $USN journal entries</a></li><li><a href=/blog/2020/2020-11-13-the-windows-usn-journal-f0c55c9010e/>The Windows USN Journal</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/velociraptor/index.html b/tags/velociraptor/index.html
index b0bf2cae387..6e5cbcbae06 100644
--- a/tags/velociraptor/index.html
+++ b/tags/velociraptor/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/velociraptor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/velociraptor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Velociraptor</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Velociraptor</h1><ul><li><a href=/blog/2021/2021-04-29-scaling-velociraptor-57acc4df76ed/>Scaling Velociraptor</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Velociraptor</h1><ul><li><a href=/blog/2021/2021-04-29-scaling-velociraptor-57acc4df76ed/>Scaling Velociraptor</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/vmware/index.html b/tags/vmware/index.html
index 379a870e1f0..07cddb2373c 100644
--- a/tags/vmware/index.html
+++ b/tags/vmware/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>VMWare :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/vmware/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/vmware/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>VMWare</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-VMWare</h1><ul><li><a href=/exchange/artifacts/pages/linux.detection.vrealizeloginsightexploitation/>Linux.Detection.vRealizeLogInsightExploitation</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+VMWare</h1><ul><li><a href=/exchange/artifacts/pages/linux.detection.vrealizeloginsightexploitation/>Linux.Detection.vRealizeLogInsightExploitation</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/vql/index.html b/tags/vql/index.html
index 18e2bbaf366..65f7c980a7d 100644
--- a/tags/vql/index.html
+++ b/tags/vql/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>VQL :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/vql/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/vql/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>VQL</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-VQL</h1><ul><li><a href=/blog/2021/2021-11-09-vql-data-manipulation/>Cobalt Strike payload discovery and data manipulation in VQL</a></li><li><a href=/blog/2021/2021-07-12-velociraptor-vs-printnightmare/>Velociraptor vs Printnightmare</a></li><li><a href=/knowledge_base/tips/random/>How do you generate random characters?</a></li><li><a href=/knowledge_base/tips/plugin_not_found/>What to do about error "Plugin info not found"</a></li><li><a href=/knowledge_base/tips/decimaldecode/>How can I convert decimal?</a></li><li><a href=/knowledge_base/tips/retry_hunt/>How do I re-collect a failed artifact in a hunt?</a></li><li><a href=/knowledge_base/tips/hunt_by_label/>How to control hunting by label groups?</a></li><li><a href=/blog/2022/2022-08-17-process-tracker/>The Velociraptor process tracker</a></li><li><a href=/knowledge_base/tips/urldecode/>How can I url/percent decode a string?</a></li><li><a href=/knowledge_base/tips/multiparts_uploads/>How can I make a multipart/form-data POST request in VQL</a></li><li><a href=/knowledge_base/tips/identifier_with_space/>In VQL, can I SELECT a column with special characters in its name?</a></li><li><a href=/blog/2022/2022-03-22-deaddisk/>Dead disk Forensics</a></li><li><a href=/blog/2022/2022-03-21-paths/>Paths and filesystem accessors</a></li><li><a href=/blog/2022/2022-01-12-wmi-eventing/>WMI Event Consumers: what are you missing?</a></li><li><a href=/blog/2022/2022-01-05-searching-for-files-on-linux/>Searching for files</a></li><li><a href=/blog/2021/2021-11-09-eql2vql/>EQL to VQL - Leverage EQL based detection rules in Velociraptor</a></li><li><a href=/blog/2021/2021-09-03-process-spoofing/>ETW Part 2: Process Parent Spoofing</a></li><li><a href=/blog/2021/2021-08-18-velociraptor-and-etw/>Event Tracing for Windows Part 1</a></li><li><a href=/blog/2021/2021-02-02-detecting-dll-hijacking-with-vql-e9a735354257/>Detecting DLL Hijacking With VQL</a></li><li><a href=/blog/2021/2021-01-22-concurrent-vql-6d381fdb0b1f/>Concurrent VQL</a></li><li><a href=/blog/2021/2021-01-19-parsing-binary-files-d31114a41f14/>Parsing binary files</a></li><li><a href=/blog/2020/2020-12-26-slack-and-velociraptor-b63803ba4b16/>Slack and Velociraptor</a></li><li><a href=/blog/2020/2020-06-19-the-velociraptor-query-language-pt-2-fe92bb7aa150/>The Velociraptor Query Language Pt 2</a></li><li><a href=/blog/2020/2020-06-14-the-velociraptor-query-language-pt-1-d721bff100bf/>The Velociraptor Query Language Pt 1</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+VQL</h1><ul><li><a href=/blog/2021/2021-11-09-vql-data-manipulation/>Cobalt Strike payload discovery and data manipulation in VQL</a></li><li><a href=/blog/2021/2021-07-12-velociraptor-vs-printnightmare/>Velociraptor vs Printnightmare</a></li><li><a href=/knowledge_base/tips/random/>How do you generate random characters?</a></li><li><a href=/knowledge_base/tips/plugin_not_found/>What to do about error "Plugin info not found"</a></li><li><a href=/knowledge_base/tips/decimaldecode/>How can I convert decimal?</a></li><li><a href=/knowledge_base/tips/retry_hunt/>How do I re-collect a failed artifact in a hunt?</a></li><li><a href=/knowledge_base/tips/hunt_by_label/>How to control hunting by label groups?</a></li><li><a href=/blog/2022/2022-08-17-process-tracker/>The Velociraptor process tracker</a></li><li><a href=/knowledge_base/tips/urldecode/>How can I url/percent decode a string?</a></li><li><a href=/knowledge_base/tips/multiparts_uploads/>How can I make a multipart/form-data POST request in VQL</a></li><li><a href=/knowledge_base/tips/identifier_with_space/>In VQL, can I SELECT a column with special characters in its name?</a></li><li><a href=/blog/2022/2022-03-22-deaddisk/>Dead disk Forensics</a></li><li><a href=/blog/2022/2022-03-21-paths/>Paths and filesystem accessors</a></li><li><a href=/blog/2022/2022-01-12-wmi-eventing/>WMI Event Consumers: what are you missing?</a></li><li><a href=/blog/2022/2022-01-05-searching-for-files-on-linux/>Searching for files</a></li><li><a href=/blog/2021/2021-11-09-eql2vql/>EQL to VQL - Leverage EQL based detection rules in Velociraptor</a></li><li><a href=/blog/2021/2021-09-03-process-spoofing/>ETW Part 2: Process Parent Spoofing</a></li><li><a href=/blog/2021/2021-08-18-velociraptor-and-etw/>Event Tracing for Windows Part 1</a></li><li><a href=/blog/2021/2021-02-02-detecting-dll-hijacking-with-vql-e9a735354257/>Detecting DLL Hijacking With VQL</a></li><li><a href=/blog/2021/2021-01-22-concurrent-vql-6d381fdb0b1f/>Concurrent VQL</a></li><li><a href=/blog/2021/2021-01-19-parsing-binary-files-d31114a41f14/>Parsing binary files</a></li><li><a href=/blog/2020/2020-12-26-slack-and-velociraptor-b63803ba4b16/>Slack and Velociraptor</a></li><li><a href=/blog/2020/2020-06-19-the-velociraptor-query-language-pt-2-fe92bb7aa150/>The Velociraptor Query Language Pt 2</a></li><li><a href=/blog/2020/2020-06-14-the-velociraptor-query-language-pt-1-d721bff100bf/>The Velociraptor Query Language Pt 1</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/vrealize/index.html b/tags/vrealize/index.html
index 29696499aa3..63def67531d 100644
--- a/tags/vrealize/index.html
+++ b/tags/vrealize/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>vRealize :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/vrealize/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/vrealize/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>vRealize</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-vRealize</h1><ul><li><a href=/exchange/artifacts/pages/linux.detection.vrealizeloginsightexploitation/>Linux.Detection.vRealizeLogInsightExploitation</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+vRealize</h1><ul><li><a href=/exchange/artifacts/pages/linux.detection.vrealizeloginsightexploitation/>Linux.Detection.vRealizeLogInsightExploitation</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/windows/index.html b/tags/windows/index.html
index 375a62f6f64..9ef4c65b215 100644
--- a/tags/windows/index.html
+++ b/tags/windows/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/windows/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/windows/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Windows</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-Windows</h1><ul><li><a href=/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/>Carving $USN journal entries</a></li><li><a href=/blog/2021/2021-06-09-verifying-executables-on-windows-1b3518122d3c/>Verifying executables on Windows</a></li><li><a href=/blog/2021/2021-04-16-digging-into-process-memory-33c60a640cdb/>Digging into process memory</a></li><li><a href=/blog/2021/2021-02-13-digging-for-files-with-velociraptor-a1c0a21e242b/>Digging for files with Velociraptor</a></li><li><a href=/blog/2021/2021-02-02-detecting-dll-hijacking-with-vql-e9a735354257/>Detecting DLL Hijacking With VQL</a></li><li><a href=/blog/2021/2021-01-29-disabled-event-log-files-a3529a08adbe/>Disabled Event Log files</a></li><li><a href=/blog/2020/2020-11-13-the-windows-usn-journal-f0c55c9010e/>The Windows USN Journal</a></li><li><a href=/exchange/artifacts/pages/hash_run_keys/>HashRunKeys</a></li><li><a href=/exchange/artifacts/pages/windows.registry.capabilityaccessmanager/>Windows.Registry.CapabilityAccessManager</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Windows</h1><ul><li><a href=/blog/2021/2021-06-16-carving-usn-journal-entries-72d5c66971da/>Carving $USN journal entries</a></li><li><a href=/blog/2021/2021-06-09-verifying-executables-on-windows-1b3518122d3c/>Verifying executables on Windows</a></li><li><a href=/blog/2021/2021-04-16-digging-into-process-memory-33c60a640cdb/>Digging into process memory</a></li><li><a href=/blog/2021/2021-02-13-digging-for-files-with-velociraptor-a1c0a21e242b/>Digging for files with Velociraptor</a></li><li><a href=/blog/2021/2021-02-02-detecting-dll-hijacking-with-vql-e9a735354257/>Detecting DLL Hijacking With VQL</a></li><li><a href=/blog/2021/2021-01-29-disabled-event-log-files-a3529a08adbe/>Disabled Event Log files</a></li><li><a href=/blog/2020/2020-11-13-the-windows-usn-journal-f0c55c9010e/>The Windows USN Journal</a></li><li><a href=/exchange/artifacts/pages/hash_run_keys/>HashRunKeys</a></li><li><a href=/exchange/artifacts/pages/windows.registry.capabilityaccessmanager/>Windows.Registry.CapabilityAccessManager</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/tags/wmi/index.html b/tags/wmi/index.html
index 53da8625fb8..6f24659f277 100644
--- a/tags/wmi/index.html
+++ b/tags/wmi/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>WMI :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/wmi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/tags/wmi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>WMI</span></div><div class=progress><div class=wrapper></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>tag ::
-WMI</h1><ul><li><a href=/blog/2022/2022-01-12-wmi-eventing/>WMI Event Consumers: what are you missing?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+WMI</h1><ul><li><a href=/blog/2022/2022-01-12-wmi-eventing/>WMI Event Consumers: what are you missing?</a></li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/training/index.html b/training/index.html
index 30bffacd455..663dbd27cf2 100644
--- a/training/index.html
+++ b/training/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Velociraptor Training :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/training/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/training/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=top-github-link><a class=github-link title='Edit this page' href=https://github.com/Velocidex/velociraptor-docs/edit/master/content/training/_index.md target=blank><i class="fas fa-code-branch"></i>
 <span id=top-github-link-text>Edit this page</span></a></div><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>Velociraptor Training</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Velociraptor Training</h1><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js></script><div class=carousel-row><script>function selectButton(e){$(".topic").removeClass("btn-primary"),$(e).removeClass("btn-secondary").addClass("btn-primary")}</script><div class="col-sm-3 carousel-choices"><button type=button class="btn btn-primary btn-lg btn-block topic" data-target=#myCarousel data-slide-to=0 onclick=selectButton(this)>Session 01<br>Installation and Overview</button><button type=button class="btn btn-secondary btn-lg btn-block topic" data-target=#myCarousel data-slide-to=1 onclick=selectButton(this)>Session 02<br>VQL Fundamentals Pt 1</button><button type=button class="btn btn-secondary btn-lg btn-block topic" data-target=#myCarousel data-slide-to=2 onclick=selectButton(this)>Session 03<br>VQL Fundamentals Pt 2</button><button type=button class="btn btn-secondary btn-lg btn-block topic" data-target=#myCarousel data-slide-to=3 onclick=selectButton(this)>Session 04<br>Forensic Analysis Pt 1</button><button type=button class="btn btn-secondary btn-lg btn-block topic" data-target=#myCarousel data-slide-to=4 onclick=selectButton(this)>Session 05<br>Forensic Analysis Pt 2</button><button type=button class="btn btn-secondary btn-lg btn-block topic" data-target=#myCarousel data-slide-to=5 onclick=selectButton(this)>Session 06<br>Offline collection</button><button type=button class="btn btn-secondary btn-lg btn-block topic" data-target=#myCarousel data-slide-to=6 onclick=selectButton(this)>Session 07<br>Extending VQL and API</button></div><div id=myCarousel class="carousel slide col-sm-9"><ol class=carousel-indicators><li data-target=#myCarousel data-slide-to=0></li><li data-target=#myCarousel data-slide-to=1></li><li data-target=#myCarousel data-slide-to=2></li><li data-target=#myCarousel data-slide-to=3></li><li data-target=#myCarousel data-slide-to=4></li><li data-target=#myCarousel data-slide-to=5></li><li data-target=#myCarousel data-slide-to=6></li></ol><div class=carousel-inner role=listbox><div class="item active"><div class=content><div class=carousel-description><h4>Velociraptor Installation and Overview.</h4><p>In this module we install Velociraptor in a cloud environment and have a quick overview of the GUI.</p></div><iframe class=youtube src=https://www.youtube.com/embed/70CBB9MdNWM title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div></div><div class=item><div class=content><div class=carousel-description><h4>VQL Fundamentals Pt 1.</h4>This module covers the basics of the Velociraptor Query Language.</div><iframe class=youtube src=https://www.youtube-nocookie.com/embed/h1HMYnRLQlo title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div></div><div class=item><div class=content><div class=carousel-description><h4>VQL Fundamentals Pt 2.</h4>Continue our journey of VQL.</div><iframe class=youtube src=https://www.youtube-nocookie.com/embed/tsmb_CuLVlE title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div></div><div class=item><div class=content><div class=carousel-description><h4>Forensic Analysis Pt 1.</h4>Armed with our understanding of VQL, we continue to apply it to perform initial triage.</div><iframe class=youtube src=https://www.youtube-nocookie.com/embed/SD1_Ev-JqCs title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div></div><div class=item><div class=content><div class=carousel-description><h4>Forensic Analysis Pt 2.</h4>Moving on to more complex forensic analysis techniques. We examine the Windows Event logs, and ETW.</div><iframe class=youtube src=https://www.youtube-nocookie.com/embed/HP8XLyGOkBA title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div></div><div class=item><div class=content><div class=carousel-description><h4>Offline collection and hunting.</h4>This module covers the use case of offline collection - deploying a pre-configured autonomous collector that fetches the required data easily.</div><iframe class=youtube src=https://www.youtube-nocookie.com/embed/DX1CcoNl_q8 title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div></div><div class=item><div class=content><div class=carousel-description><h4>Extending VQL and the Velociraptor API.</h4>In this module we show how to extend VQL using powershell or external tools. We also cover the Velociraptor API and server side automation.</div><iframe class=youtube src=https://www.youtube-nocookie.com/embed/H5g5zJGV454 title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div></div></div></div></div></div><p>Slides for the training course can be found <a href="https://drive.google.com/drive/folders/1BIMaJ4jzghIsTcFiSmDthBUmE1Ca2HnC?ths=true">here</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>Velociraptor Training</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Velociraptor Training</h1><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js></script><div class=carousel-row><script>function selectButton(e){$(".topic").removeClass("btn-primary"),$(e).removeClass("btn-secondary").addClass("btn-primary")}</script><div class="col-sm-3 carousel-choices"><button type=button class="btn btn-primary btn-lg btn-block topic" data-target=#myCarousel data-slide-to=0 onclick=selectButton(this)>Session 01<br>Installation and Overview</button><button type=button class="btn btn-secondary btn-lg btn-block topic" data-target=#myCarousel data-slide-to=1 onclick=selectButton(this)>Session 02<br>VQL Fundamentals Pt 1</button><button type=button class="btn btn-secondary btn-lg btn-block topic" data-target=#myCarousel data-slide-to=2 onclick=selectButton(this)>Session 03<br>VQL Fundamentals Pt 2</button><button type=button class="btn btn-secondary btn-lg btn-block topic" data-target=#myCarousel data-slide-to=3 onclick=selectButton(this)>Session 04<br>Forensic Analysis Pt 1</button><button type=button class="btn btn-secondary btn-lg btn-block topic" data-target=#myCarousel data-slide-to=4 onclick=selectButton(this)>Session 05<br>Forensic Analysis Pt 2</button><button type=button class="btn btn-secondary btn-lg btn-block topic" data-target=#myCarousel data-slide-to=5 onclick=selectButton(this)>Session 06<br>Offline collection</button><button type=button class="btn btn-secondary btn-lg btn-block topic" data-target=#myCarousel data-slide-to=6 onclick=selectButton(this)>Session 07<br>Extending VQL and API</button></div><div id=myCarousel class="carousel slide col-sm-9"><ol class=carousel-indicators><li data-target=#myCarousel data-slide-to=0></li><li data-target=#myCarousel data-slide-to=1></li><li data-target=#myCarousel data-slide-to=2></li><li data-target=#myCarousel data-slide-to=3></li><li data-target=#myCarousel data-slide-to=4></li><li data-target=#myCarousel data-slide-to=5></li><li data-target=#myCarousel data-slide-to=6></li></ol><div class=carousel-inner role=listbox><div class="item active"><div class=content><div class=carousel-description><h4>Velociraptor Installation and Overview.</h4><p>In this module we install Velociraptor in a cloud environment and have a quick overview of the GUI.</p></div><iframe class=youtube src=https://www.youtube.com/embed/70CBB9MdNWM title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div></div><div class=item><div class=content><div class=carousel-description><h4>VQL Fundamentals Pt 1.</h4>This module covers the basics of the Velociraptor Query Language.</div><iframe class=youtube src=https://www.youtube-nocookie.com/embed/h1HMYnRLQlo title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div></div><div class=item><div class=content><div class=carousel-description><h4>VQL Fundamentals Pt 2.</h4>Continue our journey of VQL.</div><iframe class=youtube src=https://www.youtube-nocookie.com/embed/tsmb_CuLVlE title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div></div><div class=item><div class=content><div class=carousel-description><h4>Forensic Analysis Pt 1.</h4>Armed with our understanding of VQL, we continue to apply it to perform initial triage.</div><iframe class=youtube src=https://www.youtube-nocookie.com/embed/SD1_Ev-JqCs title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div></div><div class=item><div class=content><div class=carousel-description><h4>Forensic Analysis Pt 2.</h4>Moving on to more complex forensic analysis techniques. We examine the Windows Event logs, and ETW.</div><iframe class=youtube src=https://www.youtube-nocookie.com/embed/HP8XLyGOkBA title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div></div><div class=item><div class=content><div class=carousel-description><h4>Offline collection and hunting.</h4>This module covers the use case of offline collection - deploying a pre-configured autonomous collector that fetches the required data easily.</div><iframe class=youtube src=https://www.youtube-nocookie.com/embed/DX1CcoNl_q8 title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div></div><div class=item><div class=content><div class=carousel-description><h4>Extending VQL and the Velociraptor API.</h4>In this module we show how to extend VQL using powershell or external tools. We also cover the Velociraptor API and server side automation.</div><iframe class=youtube src=https://www.youtube-nocookie.com/embed/H5g5zJGV454 title="YouTube video player" frameborder=0 allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div></div></div></div></div></div><p>Slides for the training course can be found <a href="https://drive.google.com/drive/folders/1BIMaJ4jzghIsTcFiSmDthBUmE1Ca2HnC?ths=true">here</a>.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/array/index.html b/vql_reference/basic/array/index.html
index 31027f66409..89757a20d83 100644
--- a/vql_reference/basic/array/index.html
+++ b/vql_reference/basic/array/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>array :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/array/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/array/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 <span class=links>array</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#array>array</a><ul><li><a href=#description>Description</a></li><li><a href=#examples>Examples</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=array>array</h2><p><span class='vql_type pull-right page-header'>Function</span></p><h3 id=description>Description</h3><p>Create an array with all the args.</p><p>This function accepts arbitrary arguments and creates an array by
 flattening the arguments.</p><h3 id=examples>Examples</h3><pre><code class=language-vql>array(a=1, b=2) -&gt; [1, 2]
 </code></pre><p>You can use this to flatten a subquery as well:</p><pre><code class=language-vql>SELECT array(a1={ SELECT User FROM Artifact.Windows.System.Users() }) as Users FROM scope()
-</code></pre><p>Will return a single row with Users being an array of names.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><p>Will return a single row with Users being an array of names.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/atexit/index.html b/vql_reference/basic/atexit/index.html
index 5ca2539bfe4..e1f7bd405d6 100644
--- a/vql_reference/basic/atexit/index.html
+++ b/vql_reference/basic/atexit/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>atexit :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/atexit/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/atexit/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -72,4 +72,4 @@
 clean up when the query ends.</p><h3 id=example>Example</h3><pre><code class=language-vql>LET _ &lt;= atexit(query={
   SELECT rm(filename=&quot;Foobar.txt&quot;) FROM scope()
 })
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/atoi/index.html b/vql_reference/basic/atoi/index.html
index 4cafdf2fee1..66ef9501be2 100644
--- a/vql_reference/basic/atoi/index.html
+++ b/vql_reference/basic/atoi/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>atoi :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/atoi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/atoi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 <span class=links>atoi</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#atoi>atoi</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=atoi>atoi</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>A string to convert to int</td><td>Any (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Convert a string to an integer.</p><p>The string may begin with a sign ("+" or &ldquo;-&rdquo;) and a prefix
 indicating a base: &ldquo;0b&rdquo; for base2 , &ldquo;0&rdquo; or &ldquo;0o&rdquo; for base8, &ldquo;0x&rdquo;
 for base16. It may contain underscores ("_").</p><p>This function is essentially a wrapper around Golang&rsquo;s
-<code>strconv.ParseInt()</code> function.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<code>strconv.ParseInt()</code> function.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/base64decode/index.html b/vql_reference/basic/base64decode/index.html
index e14a5096f77..0cfa6fa5896 100644
--- a/vql_reference/basic/base64decode/index.html
+++ b/vql_reference/basic/base64decode/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>base64decode :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/base64decode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/base64decode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>base64decode</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#base64decode>base64decode</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=base64decode>base64decode</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>A string to decode</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Decodes a base64 encoded string.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>base64decode</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#base64decode>base64decode</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=base64decode>base64decode</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>A string to decode</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Decodes a base64 encoded string.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/base64encode/index.html b/vql_reference/basic/base64encode/index.html
index 69a2e6d50da..39d1c365521 100644
--- a/vql_reference/basic/base64encode/index.html
+++ b/vql_reference/basic/base64encode/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>base64encode :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/base64encode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/base64encode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>base64encode</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#base64encode>base64encode</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=base64encode>base64encode</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>A string to decode</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Encodes a string into base64.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>base64encode</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#base64encode>base64encode</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=base64encode>base64encode</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>A string to decode</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Encodes a string into base64.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/basename/index.html b/vql_reference/basic/basename/index.html
index 04c6fa644c4..59ba4eebabd 100644
--- a/vql_reference/basic/basename/index.html
+++ b/vql_reference/basic/basename/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>basename :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/basename/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/basename/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>basename</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#basename>basename</a><ul><li><a href=#description>Description</a></li><li><a href=#example>Example</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=basename>basename</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>Extract directory name of path</td><td>Any (required)</td></tr><tr><td>sep</td><td>Separator to use (default /)</td><td>string</td></tr><tr><td>path_type</td><td>Type of path (e.g. windows, linux)</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Return the basename of the path.</p><h3 id=example>Example</h3><pre><code class=language-vql>basename(path=&quot;/foo/bar&quot;) -&gt; &quot;bar&quot;
-</code></pre><p>Related: <code>dirname()</code></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><p>Related: <code>dirname()</code></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/batch/index.html b/vql_reference/basic/batch/index.html
index 711379b2bff..ed1ebbb9a06 100644
--- a/vql_reference/basic/batch/index.html
+++ b/vql_reference/basic/batch/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>batch :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/batch/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/batch/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -73,4 +73,4 @@
   SELECT _value
   FROM range(start=0, end=10, step=1)
 }, batch_size=3)
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/cache/index.html b/vql_reference/basic/cache/index.html
index 82c6b935411..5eede38bbd5 100644
--- a/vql_reference/basic/cache/index.html
+++ b/vql_reference/basic/cache/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>cache :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/cache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/cache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -78,4 +78,4 @@
     SELECT cache(func=get_pid_query(Lpid=Pid), key=str(str=Pid))
     FROM ....
 </code></pre><p>The cache will ensure that get_pid_query() is only called once per
-unique Pid by comparing the key against the internal memory store.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+unique Pid by comparing the key against the internal memory store.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/column_filter/index.html b/vql_reference/basic/column_filter/index.html
index ac389c6137f..97bde31eb72 100644
--- a/vql_reference/basic/column_filter/index.html
+++ b/vql_reference/basic/column_filter/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>column_filter :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/column_filter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/column_filter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -77,4 +77,4 @@
    FROM scope()
 }, include=&quot;A&quot;, exclude=&quot;B&quot;)
 </code></pre><p>will include columns with the letter A in their name and remove
-columns with the letter B (so it will have A and AA above).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+columns with the letter B (so it will have A and AA above).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/copy/index.html b/vql_reference/basic/copy/index.html
index 2a87a5e73fa..f41af01933a 100644
--- a/vql_reference/basic/copy/index.html
+++ b/vql_reference/basic/copy/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>copy :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/copy/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/copy/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -76,4 +76,4 @@
 accessor into a file on disk.</p><p>This function can also be used to create new files with prescribed
 content - for example:</p><pre><code class=language-vql>SELECT copy(filename=&quot;Hello world&quot;, accessor=&quot;data&quot;, dest=&quot;C:/hi.txt&quot;)
 FROM scope()
-</code></pre><p>NOTE: Sparse files are padded out</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><p>NOTE: Sparse files are padded out</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/count/index.html b/vql_reference/basic/count/index.html
index 8856cd4a385..b8e9855094b 100644
--- a/vql_reference/basic/count/index.html
+++ b/vql_reference/basic/count/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>count :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/count/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/count/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -74,4 +74,4 @@
 count. NOTE: When used in this way it only counts the total number
 of rows that are actually evaluated (i.e. not filtered out) due to
 the lazy evaluation property of VQL columns.</p><p>For a full discussion of aggregate functions see
-<a href=https://docs.velociraptor.app/docs/vql/#aggregate-functions>https://docs.velociraptor.app/docs/vql/#aggregate-functions</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<a href=https://docs.velociraptor.app/docs/vql/#aggregate-functions>https://docs.velociraptor.app/docs/vql/#aggregate-functions</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/dict/index.html b/vql_reference/basic/dict/index.html
index d89ea4943e1..99c99ec2b81 100644
--- a/vql_reference/basic/dict/index.html
+++ b/vql_reference/basic/dict/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>dict :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/dict/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/dict/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -74,4 +74,4 @@
 backticks to escape the name. For example:</p><pre><code class=language-vql>SELECT dict(Foo=&quot;Bar&quot;, `Name.With.Dots`=&quot;Baz&quot;)
 FROM scope()
 </code></pre><p>See the <code>to_dict()</code> function to create dicts from a query with
-unpredictable key names.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+unpredictable key names.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/dirname/index.html b/vql_reference/basic/dirname/index.html
index ce6a48662a6..9467e3cb13e 100644
--- a/vql_reference/basic/dirname/index.html
+++ b/vql_reference/basic/dirname/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>dirname :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/dirname/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/dirname/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>dirname</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#dirname>dirname</a><ul><li><a href=#description>Description</a></li><li><a href=#example>Example</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=dirname>dirname</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>Extract directory name of path</td><td>Any (required)</td></tr><tr><td>sep</td><td>Separator to use (default /)</td><td>string</td></tr><tr><td>path_type</td><td>Type of path (e.g. windows, linux)</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Return the directory path.</p><h3 id=example>Example</h3><pre><code class=language-vql>dirname(path=&quot;/usr/bin/ls&quot;) -&gt; &quot;/usr/bin&quot;
-</code></pre><p>Related: <code>basename()</code></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><p>Related: <code>basename()</code></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/encode/index.html b/vql_reference/basic/encode/index.html
index 05e89c37b70..1dd984f2dbf 100644
--- a/vql_reference/basic/encode/index.html
+++ b/vql_reference/basic/encode/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>encode :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/encode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/encode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>encode</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#encode>encode</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=encode>encode</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td></td><td>Any (required)</td></tr><tr><td>type</td><td></td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Encodes a string as as different type. Currently supported types include &lsquo;hex&rsquo;, &lsquo;base64&rsquo;.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>encode</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#encode>encode</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=encode>encode</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td></td><td>Any (required)</td></tr><tr><td>type</td><td></td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Encodes a string as as different type. Currently supported types include &lsquo;hex&rsquo;, &lsquo;base64&rsquo;.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/enumerate/index.html b/vql_reference/basic/enumerate/index.html
index 57ef469bd69..cbfbcb86eac 100644
--- a/vql_reference/basic/enumerate/index.html
+++ b/vql_reference/basic/enumerate/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>enumerate :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/enumerate/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/enumerate/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 <span class=links>enumerate</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#enumerate>enumerate</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=enumerate>enumerate</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>items</td><td>Not used anymore</td><td>Any</td></tr></tbody></table><h3 id=description>Description</h3><p>Collect all the items in each group by bin.</p><p>This is an aggregate function that keeps track of all elements in
 a GROUP BY group.</p><p>NOTE: Use this function carefully as memory use can be large. It
 keeps a copy of every element in the group and that can be very
-large for large result sets.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+large for large result sets.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/environ/index.html b/vql_reference/basic/environ/index.html
index 18b7da7c05a..81ed6411d50 100644
--- a/vql_reference/basic/environ/index.html
+++ b/vql_reference/basic/environ/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>environ :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/environ/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/environ/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>environ</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#environ>environ</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=environ>environ</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>var</td><td>Extract the var from the environment.</td><td>string (required)</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Get an environment variable.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Get an environment variable.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/expand/index.html b/vql_reference/basic/expand/index.html
index fe2e160c5bc..f5b65b61e39 100644
--- a/vql_reference/basic/expand/index.html
+++ b/vql_reference/basic/expand/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>expand :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/expand/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/expand/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -82,4 +82,4 @@
 own environment may not reflect any other process&rsquo;s
 environment. See <code>Windows.Forensics.ProcessInfo</code> for a
 forensically sound manner of obtaining the environment from any
-process.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+process.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/filter/index.html b/vql_reference/basic/filter/index.html
index 5e79b1d03ce..783cd7dc634 100644
--- a/vql_reference/basic/filter/index.html
+++ b/vql_reference/basic/filter/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>filter :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/filter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/filter/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 <span class=links>filter</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#filter>filter</a><ul><li><a href=#description>Description</a></li><li><a href=#examples>Examples</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=filter>filter</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>list</td><td>A list of items to filter</td><td>list of Any (required)</td></tr><tr><td>regex</td><td>A regex to test each item</td><td>list of string</td></tr><tr><td>condition</td><td>A VQL lambda to use to filter elements</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Filters an array by regex or condition.</p><h3 id=examples>Examples</h3><pre><code class=language-vql>filter(list=[&quot;AA&quot;, &quot;AB&quot;, &quot;BA&quot;, &quot;BB&quot;], regex=&quot;^A&quot;) -&gt; [&quot;AA&quot;, &quot;AB&quot;]
 
 filter(list=[1, 2, 3, 4, 5, 6], condition=&quot;x=&gt;x &gt; 3&quot;) -&gt; [4, 5, 6]
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/format/index.html b/vql_reference/basic/format/index.html
index d27727ed50b..120ffba2196 100644
--- a/vql_reference/basic/format/index.html
+++ b/vql_reference/basic/format/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>format :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/format/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/format/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>format</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#format>format</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=format>format</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>format</td><td>Format string to use</td><td>string (required)</td></tr><tr><td>args</td><td>An array of elements to apply into the format string.</td><td>Any</td></tr></tbody></table><h3 id=description>Description</h3><p>Format one or more items according to a format string.</p><p>This function is essentially a wrapper around Golang&rsquo;s
-fmt.Sprintf() function and uses the same format specifiers.</p><p><a href=https://pkg.go.dev/fmt>https://pkg.go.dev/fmt</a></p><p>Of note the following are very useful:</p><ul><li>The <code>% x</code> applied on strings will hex print the string</li><li>The <code>%T</code> will reveal the internal type of an object.</li><li>The <code>%v</code> is the general purpose stringifier and can apply to strings, ints etc.</li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+fmt.Sprintf() function and uses the same format specifiers.</p><p><a href=https://pkg.go.dev/fmt>https://pkg.go.dev/fmt</a></p><p>Of note the following are very useful:</p><ul><li>The <code>% x</code> applied on strings will hex print the string</li><li>The <code>%T</code> will reveal the internal type of an object.</li><li>The <code>%v</code> is the general purpose stringifier and can apply to strings, ints etc.</li></ul><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/generate/index.html b/vql_reference/basic/generate/index.html
index 2591e0959a9..50b7309d3ff 100644
--- a/vql_reference/basic/generate/index.html
+++ b/vql_reference/basic/generate/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>generate :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/generate/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/generate/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -96,4 +96,4 @@
 </code></pre><p>Neither of those queries will terminate as VQL waits for them to
 produce all their rows before moving to the next statement but the
 <code>watch_etw()</code> query will never terminate since it is an event
-query.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+query.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/get/index.html b/vql_reference/basic/get/index.html
index 146b3e89481..e8340d15b96 100644
--- a/vql_reference/basic/get/index.html
+++ b/vql_reference/basic/get/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>get :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/get/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/get/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -76,4 +76,4 @@
 ]
 </code></pre><p>Using the member parameter you can index inside a nested
 dictionary using dots to separate the layers.</p><p>If you need to access a field with dots in its name, you can use
-the field parameter which simply fetches the named field.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+the field parameter which simply fetches the named field.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/getpid/index.html b/vql_reference/basic/getpid/index.html
index 26faa6675e5..09048cd58f3 100644
--- a/vql_reference/basic/getpid/index.html
+++ b/vql_reference/basic/getpid/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>getpid :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/getpid/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/getpid/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>getpid</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#getpid>getpid</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=getpid>getpid</h2><p><span class='vql_type pull-right page-header'>Function</span></p><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Returns the current pid of the Velociraptor process.</p><p>This is typically used to exclude analysis from our own process.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Returns the current pid of the Velociraptor process.</p><p>This is typically used to exclude analysis from our own process.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/humanize/index.html b/vql_reference/basic/humanize/index.html
index 001b35abc43..89b2fa60eb0 100644
--- a/vql_reference/basic/humanize/index.html
+++ b/vql_reference/basic/humanize/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>humanize :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/humanize/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/humanize/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>humanize</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#humanize>humanize</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=humanize>humanize</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>bytes</td><td>Format bytes with units</td><td>int64</td></tr></tbody></table><h3 id=description>Description</h3><p>Format items in human readable way.</p><p>Formats a byte count in human readable way (e.g. Mb, Gb etc).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>humanize</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#humanize>humanize</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=humanize>humanize</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>bytes</td><td>Format bytes with units</td><td>int64</td></tr></tbody></table><h3 id=description>Description</h3><p>Format items in human readable way.</p><p>Formats a byte count in human readable way (e.g. Mb, Gb etc).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/if/index.html b/vql_reference/basic/if/index.html
index 795f5ae41cf..7cc93d1db85 100644
--- a/vql_reference/basic/if/index.html
+++ b/vql_reference/basic/if/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>if :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/if/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/if/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -72,4 +72,4 @@
 <code>then</code> or <code>else</code> clause are evaluated lazily. They may be expressions
 that involve stored queries (i.e. queries stored using the <code>LET</code>
 keyword). These queries will not be evaluated if they are not needed.</p><p>This allows a query to cheaply branch. For example, if a parameter is
-given, then perform hash or upload to the server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+given, then perform hash or upload to the server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/index.html b/vql_reference/basic/index.html
index d120b13fc46..25cd956fa5b 100644
--- a/vql_reference/basic/index.html
+++ b/vql_reference/basic/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Basic VQL :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -75,4 +75,4 @@
 of the VQL query - i.e. plugins always follow the <code>FROM</code> keyword,
 while functions (which return a single value instead of a sequence of
 rows) are only present in column specification (e.g. after <code>SELECT</code>)
-or in condition clauses (i.e. after the <code>WHERE</code> keyword).</p></div></div><table><thead><tr><th>Plugin/Function</th><th><span class=vql_type>Type</span></th><th>Description</th></tr></thead><tbody><tr><td><a href=array>array</a></td><td><span class=vql_type>Function</span></td><td>Create an array with all the args</td></tr><tr><td><a href=atexit>atexit</a></td><td><span class=vql_type>Function</span></td><td>Install a query to run when the query is unwound</td></tr><tr><td><a href=atoi>atoi</a></td><td><span class=vql_type>Function</span></td><td>Convert a string to an integer</td></tr><tr><td><a href=base64decode>base64decode</a></td><td><span class=vql_type>Function</span></td><td>Decodes a base64 encoded string</td></tr><tr><td><a href=base64encode>base64encode</a></td><td><span class=vql_type>Function</span></td><td>Encodes a string into base64</td></tr><tr><td><a href=basename>basename</a></td><td><span class=vql_type>Function</span></td><td>Return the basename of the path</td></tr><tr><td><a href=batch>batch</a></td><td><span class=vql_type>Plugin</span></td><td>Batches query rows into multiple arrays</td></tr><tr><td><a href=cache>cache</a></td><td><span class=vql_type>Function</span></td><td>Creates a cache object</td></tr><tr><td><a href=column_filter>column_filter</a></td><td><span class=vql_type>Plugin</span></td><td>Select columns from another query using regex</td></tr><tr><td><a href=copy>copy</a></td><td><span class=vql_type>Function</span></td><td>Copy a file</td></tr><tr><td><a href=count>count</a></td><td><span class=vql_type>Function</span></td><td>Counts the items</td></tr><tr><td><a href=dict>dict</a></td><td><span class=vql_type>Function</span></td><td>Construct a dict from arbitrary keyword args</td></tr><tr><td><a href=dirname>dirname</a></td><td><span class=vql_type>Function</span></td><td>Return the directory path</td></tr><tr><td><a href=encode>encode</a></td><td><span class=vql_type>Function</span></td><td>Encodes a string as as different type</td></tr><tr><td><a href=enumerate>enumerate</a></td><td><span class=vql_type>Function</span></td><td>Collect all the items in each group by bin</td></tr><tr><td><a href=environ>environ</a></td><td><span class=vql_type>Function</span></td><td>Get an environment variable</td></tr><tr><td><a href=expand>expand</a></td><td><span class=vql_type>Function</span></td><td>Expand the path using the environment</td></tr><tr><td><a href=filter>filter</a></td><td><span class=vql_type>Function</span></td><td>Filters an array by regex or condition</td></tr><tr><td><a href=format>format</a></td><td><span class=vql_type>Function</span></td><td>Format one or more items according to a format string</td></tr><tr><td><a href=generate>generate</a></td><td><span class=vql_type>Function</span></td><td>Create a named generator that receives rows from the query</td></tr><tr><td><a href=get>get</a></td><td><span class=vql_type>Function</span></td><td>Gets the member field from item</td></tr><tr><td><a href=getpid>getpid</a></td><td><span class=vql_type>Function</span></td><td>Returns the current pid of the Velociraptor process</td></tr><tr><td><a href=humanize>humanize</a></td><td><span class=vql_type>Function</span></td><td>Format items in human readable way</td></tr><tr><td><a href=if>if</a></td><td><span class=vql_type>Function</span></td><td>Conditional execution of query</td></tr><tr><td><a href=items>items</a></td><td><span class=vql_type>Function</span></td><td>Iterate over dict members producing _key and _value columns</td></tr><tr><td><a href=items>items</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerate all members of the item (similar to Python&rsquo;s items() method)</td></tr><tr><td><a href=join>join</a></td><td><span class=vql_type>Function</span></td><td>Join all the args on a separator</td></tr><tr><td><a href=killkillkill>killkillkill</a></td><td><span class=vql_type>Function</span></td><td>Kills the client and forces a restart - this is very aggressive!</td></tr><tr><td><a href=len>len</a></td><td><span class=vql_type>Function</span></td><td>Returns the length of an object</td></tr><tr><td><a href=log>log</a></td><td><span class=vql_type>Function</span></td><td>Log the message and return TRUE</td></tr><tr><td><a href=lowcase>lowcase</a></td><td><span class=vql_type>Function</span></td><td>Returns the lowercase version of a string</td></tr><tr><td><a href=max>max</a></td><td><span class=vql_type>Function</span></td><td>Finds the largest item in the aggregate</td></tr><tr><td><a href=memoize>memoize</a></td><td><span class=vql_type>Function</span></td><td>Memoize a query into memory</td></tr><tr><td><a href=min>min</a></td><td><span class=vql_type>Function</span></td><td>Finds the smallest item in the aggregate</td></tr><tr><td><a href=now>now</a></td><td><span class=vql_type>Function</span></td><td>Returns current time in seconds since epoch</td></tr><tr><td><a href=path_join>path_join</a></td><td><span class=vql_type>Function</span></td><td>Build a path by joining all components</td></tr><tr><td><a href=path_split>path_split</a></td><td><span class=vql_type>Function</span></td><td>Split a path into components</td></tr><tr><td><a href=query>query</a></td><td><span class=vql_type>Function</span></td><td>Launch a subquery and materialize it into a list of rows</td></tr><tr><td><a href=rand>rand</a></td><td><span class=vql_type>Function</span></td><td>Selects a random number</td></tr><tr><td><a href=range>range</a></td><td><span class=vql_type>Plugin</span></td><td>Iterate over range</td></tr><tr><td><a href=read_file>read_file</a></td><td><span class=vql_type>Function</span></td><td>Read a file into a string</td></tr><tr><td><a href=regex_transform>regex_transform</a></td><td><span class=vql_type>Function</span></td><td>Search and replace a string with multiple regex</td></tr><tr><td><a href=relpath>relpath</a></td><td><span class=vql_type>Function</span></td><td>Return the relative path of</td></tr><tr><td><a href=scope>scope</a></td><td><span class=vql_type>Function</span></td><td>return the scope</td></tr><tr><td><a href=serialize>serialize</a></td><td><span class=vql_type>Function</span></td><td>Encode an object as a string (csv or json)</td></tr><tr><td><a href=set>set</a></td><td><span class=vql_type>Function</span></td><td>Sets the member field of the item</td></tr><tr><td><a href=sleep>sleep</a></td><td><span class=vql_type>Function</span></td><td>Sleep for the specified number of seconds</td></tr><tr><td><a href=slice>slice</a></td><td><span class=vql_type>Function</span></td><td>Slice an array</td></tr><tr><td><a href=split>split</a></td><td><span class=vql_type>Function</span></td><td>Splits a string into an array based on a regexp separator</td></tr><tr><td><a href=str>str</a></td><td><span class=vql_type>Function</span></td><td>Returns the string representation of provided data</td></tr><tr><td><a href=strip>strip</a></td><td><span class=vql_type>Function</span></td><td>Strip prefix and/or suffix from a string</td></tr><tr><td><a href=substr>substr</a></td><td><span class=vql_type>Function</span></td><td>Create a substring from a string</td></tr><tr><td><a href=sum>sum</a></td><td><span class=vql_type>Function</span></td><td>Sums the items</td></tr><tr><td><a href=tempdir>tempdir</a></td><td><span class=vql_type>Function</span></td><td>Create a temporary directory</td></tr><tr><td><a href=timestamp>timestamp</a></td><td><span class=vql_type>Function</span></td><td>Convert from different types to a time</td></tr><tr><td><a href=to_dict>to_dict</a></td><td><span class=vql_type>Function</span></td><td>Construct a dict from a query</td></tr><tr><td><a href=unhex>unhex</a></td><td><span class=vql_type>Function</span></td><td>Apply hex decoding to the string</td></tr><tr><td><a href=unzip>unzip</a></td><td><span class=vql_type>Plugin</span></td><td>Unzips a file into a directory</td></tr><tr><td><a href=upcase>upcase</a></td><td><span class=vql_type>Function</span></td><td>Returns an uppercase version of the string</td></tr><tr><td><a href=upload_sftp>upload_sftp</a></td><td><span class=vql_type>Function</span></td><td>Upload files to SFTP</td></tr><tr><td><a href=upload_webdav>upload_webdav</a></td><td><span class=vql_type>Function</span></td><td>Upload files to a WebDAV server</td></tr><tr><td><a href=url>url</a></td><td><span class=vql_type>Function</span></td><td>Construct a URL or parse one</td></tr><tr><td><a href=utf16>utf16</a></td><td><span class=vql_type>Function</span></td><td>Parse input from utf16</td></tr><tr><td><a href=utf16_encode>utf16_encode</a></td><td><span class=vql_type>Function</span></td><td>Encode a string to utf16 bytes</td></tr><tr><td><a href=uuid>uuid</a></td><td><span class=vql_type>Function</span></td><td>Generate a UUID</td></tr><tr><td><a href=version>version</a></td><td><span class=vql_type>Function</span></td><td></td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+or in condition clauses (i.e. after the <code>WHERE</code> keyword).</p></div></div><table><thead><tr><th>Plugin/Function</th><th><span class=vql_type>Type</span></th><th>Description</th></tr></thead><tbody><tr><td><a href=array>array</a></td><td><span class=vql_type>Function</span></td><td>Create an array with all the args</td></tr><tr><td><a href=atexit>atexit</a></td><td><span class=vql_type>Function</span></td><td>Install a query to run when the query is unwound</td></tr><tr><td><a href=atoi>atoi</a></td><td><span class=vql_type>Function</span></td><td>Convert a string to an integer</td></tr><tr><td><a href=base64decode>base64decode</a></td><td><span class=vql_type>Function</span></td><td>Decodes a base64 encoded string</td></tr><tr><td><a href=base64encode>base64encode</a></td><td><span class=vql_type>Function</span></td><td>Encodes a string into base64</td></tr><tr><td><a href=basename>basename</a></td><td><span class=vql_type>Function</span></td><td>Return the basename of the path</td></tr><tr><td><a href=batch>batch</a></td><td><span class=vql_type>Plugin</span></td><td>Batches query rows into multiple arrays</td></tr><tr><td><a href=cache>cache</a></td><td><span class=vql_type>Function</span></td><td>Creates a cache object</td></tr><tr><td><a href=column_filter>column_filter</a></td><td><span class=vql_type>Plugin</span></td><td>Select columns from another query using regex</td></tr><tr><td><a href=copy>copy</a></td><td><span class=vql_type>Function</span></td><td>Copy a file</td></tr><tr><td><a href=count>count</a></td><td><span class=vql_type>Function</span></td><td>Counts the items</td></tr><tr><td><a href=dict>dict</a></td><td><span class=vql_type>Function</span></td><td>Construct a dict from arbitrary keyword args</td></tr><tr><td><a href=dirname>dirname</a></td><td><span class=vql_type>Function</span></td><td>Return the directory path</td></tr><tr><td><a href=encode>encode</a></td><td><span class=vql_type>Function</span></td><td>Encodes a string as as different type</td></tr><tr><td><a href=enumerate>enumerate</a></td><td><span class=vql_type>Function</span></td><td>Collect all the items in each group by bin</td></tr><tr><td><a href=environ>environ</a></td><td><span class=vql_type>Function</span></td><td>Get an environment variable</td></tr><tr><td><a href=expand>expand</a></td><td><span class=vql_type>Function</span></td><td>Expand the path using the environment</td></tr><tr><td><a href=filter>filter</a></td><td><span class=vql_type>Function</span></td><td>Filters an array by regex or condition</td></tr><tr><td><a href=format>format</a></td><td><span class=vql_type>Function</span></td><td>Format one or more items according to a format string</td></tr><tr><td><a href=generate>generate</a></td><td><span class=vql_type>Function</span></td><td>Create a named generator that receives rows from the query</td></tr><tr><td><a href=get>get</a></td><td><span class=vql_type>Function</span></td><td>Gets the member field from item</td></tr><tr><td><a href=getpid>getpid</a></td><td><span class=vql_type>Function</span></td><td>Returns the current pid of the Velociraptor process</td></tr><tr><td><a href=humanize>humanize</a></td><td><span class=vql_type>Function</span></td><td>Format items in human readable way</td></tr><tr><td><a href=if>if</a></td><td><span class=vql_type>Function</span></td><td>Conditional execution of query</td></tr><tr><td><a href=items>items</a></td><td><span class=vql_type>Function</span></td><td>Iterate over dict members producing _key and _value columns</td></tr><tr><td><a href=items>items</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerate all members of the item (similar to Python&rsquo;s items() method)</td></tr><tr><td><a href=join>join</a></td><td><span class=vql_type>Function</span></td><td>Join all the args on a separator</td></tr><tr><td><a href=killkillkill>killkillkill</a></td><td><span class=vql_type>Function</span></td><td>Kills the client and forces a restart - this is very aggressive!</td></tr><tr><td><a href=len>len</a></td><td><span class=vql_type>Function</span></td><td>Returns the length of an object</td></tr><tr><td><a href=log>log</a></td><td><span class=vql_type>Function</span></td><td>Log the message and return TRUE</td></tr><tr><td><a href=lowcase>lowcase</a></td><td><span class=vql_type>Function</span></td><td>Returns the lowercase version of a string</td></tr><tr><td><a href=max>max</a></td><td><span class=vql_type>Function</span></td><td>Finds the largest item in the aggregate</td></tr><tr><td><a href=memoize>memoize</a></td><td><span class=vql_type>Function</span></td><td>Memoize a query into memory</td></tr><tr><td><a href=min>min</a></td><td><span class=vql_type>Function</span></td><td>Finds the smallest item in the aggregate</td></tr><tr><td><a href=now>now</a></td><td><span class=vql_type>Function</span></td><td>Returns current time in seconds since epoch</td></tr><tr><td><a href=path_join>path_join</a></td><td><span class=vql_type>Function</span></td><td>Build a path by joining all components</td></tr><tr><td><a href=path_split>path_split</a></td><td><span class=vql_type>Function</span></td><td>Split a path into components</td></tr><tr><td><a href=query>query</a></td><td><span class=vql_type>Function</span></td><td>Launch a subquery and materialize it into a list of rows</td></tr><tr><td><a href=rand>rand</a></td><td><span class=vql_type>Function</span></td><td>Selects a random number</td></tr><tr><td><a href=range>range</a></td><td><span class=vql_type>Plugin</span></td><td>Iterate over range</td></tr><tr><td><a href=read_file>read_file</a></td><td><span class=vql_type>Function</span></td><td>Read a file into a string</td></tr><tr><td><a href=regex_transform>regex_transform</a></td><td><span class=vql_type>Function</span></td><td>Search and replace a string with multiple regex</td></tr><tr><td><a href=relpath>relpath</a></td><td><span class=vql_type>Function</span></td><td>Return the relative path of</td></tr><tr><td><a href=scope>scope</a></td><td><span class=vql_type>Function</span></td><td>return the scope</td></tr><tr><td><a href=serialize>serialize</a></td><td><span class=vql_type>Function</span></td><td>Encode an object as a string (csv or json)</td></tr><tr><td><a href=set>set</a></td><td><span class=vql_type>Function</span></td><td>Sets the member field of the item</td></tr><tr><td><a href=sleep>sleep</a></td><td><span class=vql_type>Function</span></td><td>Sleep for the specified number of seconds</td></tr><tr><td><a href=slice>slice</a></td><td><span class=vql_type>Function</span></td><td>Slice an array</td></tr><tr><td><a href=split>split</a></td><td><span class=vql_type>Function</span></td><td>Splits a string into an array based on a regexp separator</td></tr><tr><td><a href=str>str</a></td><td><span class=vql_type>Function</span></td><td>Returns the string representation of provided data</td></tr><tr><td><a href=strip>strip</a></td><td><span class=vql_type>Function</span></td><td>Strip prefix and/or suffix from a string</td></tr><tr><td><a href=substr>substr</a></td><td><span class=vql_type>Function</span></td><td>Create a substring from a string</td></tr><tr><td><a href=sum>sum</a></td><td><span class=vql_type>Function</span></td><td>Sums the items</td></tr><tr><td><a href=tempdir>tempdir</a></td><td><span class=vql_type>Function</span></td><td>Create a temporary directory</td></tr><tr><td><a href=timestamp>timestamp</a></td><td><span class=vql_type>Function</span></td><td>Convert from different types to a time</td></tr><tr><td><a href=to_dict>to_dict</a></td><td><span class=vql_type>Function</span></td><td>Construct a dict from a query</td></tr><tr><td><a href=unhex>unhex</a></td><td><span class=vql_type>Function</span></td><td>Apply hex decoding to the string</td></tr><tr><td><a href=unzip>unzip</a></td><td><span class=vql_type>Plugin</span></td><td>Unzips a file into a directory</td></tr><tr><td><a href=upcase>upcase</a></td><td><span class=vql_type>Function</span></td><td>Returns an uppercase version of the string</td></tr><tr><td><a href=upload_sftp>upload_sftp</a></td><td><span class=vql_type>Function</span></td><td>Upload files to SFTP</td></tr><tr><td><a href=upload_webdav>upload_webdav</a></td><td><span class=vql_type>Function</span></td><td>Upload files to a WebDAV server</td></tr><tr><td><a href=url>url</a></td><td><span class=vql_type>Function</span></td><td>Construct a URL or parse one</td></tr><tr><td><a href=utf16>utf16</a></td><td><span class=vql_type>Function</span></td><td>Parse input from utf16</td></tr><tr><td><a href=utf16_encode>utf16_encode</a></td><td><span class=vql_type>Function</span></td><td>Encode a string to utf16 bytes</td></tr><tr><td><a href=uuid>uuid</a></td><td><span class=vql_type>Function</span></td><td>Generate a UUID</td></tr><tr><td><a href=version>version</a></td><td><span class=vql_type>Function</span></td><td></td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/items/index.html b/vql_reference/basic/items/index.html
index 31434500b33..e744f65cd34 100644
--- a/vql_reference/basic/items/index.html
+++ b/vql_reference/basic/items/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>items :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/items/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/items/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -85,4 +85,4 @@
     }
   }
 ]
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/join/index.html b/vql_reference/basic/join/index.html
index f6a02449884..5a0d39b74f9 100644
--- a/vql_reference/basic/join/index.html
+++ b/vql_reference/basic/join/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>join :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/join/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/join/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>join</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#join>join</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=join>join</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>array</td><td>The array to join</td><td>list of string (required)</td></tr><tr><td>sep</td><td>The separator. Defaults to an empty string if not explicitly set</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Join all the args on a separator.</p><p>Joins the array into a string separated by the sep character.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>join</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#join>join</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=join>join</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>array</td><td>The array to join</td><td>list of string (required)</td></tr><tr><td>sep</td><td>The separator. Defaults to an empty string if not explicitly set</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Join all the args on a separator.</p><p>Joins the array into a string separated by the sep character.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/killkillkill/index.html b/vql_reference/basic/killkillkill/index.html
index 94ba8c46c32..91b90a19f2a 100644
--- a/vql_reference/basic/killkillkill/index.html
+++ b/vql_reference/basic/killkillkill/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>killkillkill :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/killkillkill/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/killkillkill/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>killkillkill</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#killkillkill>killkillkill</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=killkillkill>killkillkill</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>client_id</td><td></td><td>string (required)</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Kills the client and forces a restart - this is very aggressive!</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Kills the client and forces a restart - this is very aggressive!</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/len/index.html b/vql_reference/basic/len/index.html
index e55ae6cd3bd..9225c0856a8 100644
--- a/vql_reference/basic/len/index.html
+++ b/vql_reference/basic/len/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>len :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/len/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/len/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>len</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#len>len</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=len>len</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>list</td><td>A list of items to filter</td><td>Any (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Returns the length of an object.</p><p>For strings, this is the number of bytes.
 For arrays, this is the number of entries.
-For dicts, this is the number of key/value pairs.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+For dicts, this is the number of key/value pairs.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/log/index.html b/vql_reference/basic/log/index.html
index c2824838a35..5c0db5160dc 100644
--- a/vql_reference/basic/log/index.html
+++ b/vql_reference/basic/log/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>log :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/log/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/log/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -83,4 +83,4 @@
 deduped.</p><p>This property makes it useful to add progress logging to long
 running artifacts. The logs will be emitted every minute.</p><pre><code class=language-vql>SELECT * FROM glob(...)
 WHERE log(message=&quot;Processing file %v&quot;, args=OSPath)
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/lowcase/index.html b/vql_reference/basic/lowcase/index.html
index 201b7e127ce..05313c231b3 100644
--- a/vql_reference/basic/lowcase/index.html
+++ b/vql_reference/basic/lowcase/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>lowcase :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/lowcase/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/lowcase/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>lowcase</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#lowcase>lowcase</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=lowcase>lowcase</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>The string to process</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Returns the lowercase version of a string.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>lowcase</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#lowcase>lowcase</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=lowcase>lowcase</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>The string to process</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Returns the lowercase version of a string.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/max/index.html b/vql_reference/basic/max/index.html
index 25edc3fa518..7f2d44b5e50 100644
--- a/vql_reference/basic/max/index.html
+++ b/vql_reference/basic/max/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>max :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/max/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/max/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>max</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#max>max</a><ul><li><a href=#description>Description</a></li><li><a href=#example>Example</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=max>max</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>item</td><td></td><td>LazyExpr (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Finds the largest item in the aggregate.</p><p>It is only meaningful in a group by query.</p><h3 id=example>Example</h3><p>The following query lists all the processes and shows the largest
 bash pid of all bash processes.</p><pre><code class=language-vql>SELECT Name, max(items=Pid) as LargestPid from pslist() Where Name =~ 'bash' group by Name
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/memoize/index.html b/vql_reference/basic/memoize/index.html
index f3af77dee36..c361e5b3e15 100644
--- a/vql_reference/basic/memoize/index.html
+++ b/vql_reference/basic/memoize/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>memoize :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/memoize/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/memoize/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -86,4 +86,4 @@
 column of the query is used as the key of the dict.</p><p>You can access the cache using the <code>get()</code> function or the <code>.</code>
 operator. If the key matches the entire row is retrieved:</p><pre><code class=language-vql>SELECT get(item=m, field=str(str=Pid)).Name AS ProcessName
 FROM source()
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/min/index.html b/vql_reference/basic/min/index.html
index cdb342bd305..c8b96edcbcc 100644
--- a/vql_reference/basic/min/index.html
+++ b/vql_reference/basic/min/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>min :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/min/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/min/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>min</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#min>min</a><ul><li><a href=#description>Description</a></li><li><a href=#example>Example</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=min>min</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>item</td><td></td><td>LazyExpr (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Finds the smallest item in the aggregate.</p><p>It is only meaningful in a group by query.</p><h3 id=example>Example</h3><p>The following query lists all the processes and shows the smallest
 bash pid of all bash processes.</p><pre><code class=language-vql>SELECT Name, min(items=Pid) as SmallestPid from pslist() Where Name =~ 'bash' group by Name
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/now/index.html b/vql_reference/basic/now/index.html
index c1378608571..1a467672ed7 100644
--- a/vql_reference/basic/now/index.html
+++ b/vql_reference/basic/now/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>now :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/now/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/now/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>now</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#now>now</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=now>now</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>A string to convert to int</td><td>Any (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Returns current time in seconds since epoch.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>now</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#now>now</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=now>now</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>A string to convert to int</td><td>Any (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Returns current time in seconds since epoch.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/path_join/index.html b/vql_reference/basic/path_join/index.html
index 405fffa4bf0..a0e3c347889 100644
--- a/vql_reference/basic/path_join/index.html
+++ b/vql_reference/basic/path_join/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>path_join :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/path_join/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/path_join/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>path_join</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#path_join>path_join</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=path_join>path_join</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>components</td><td>Path components to join.</td><td>list of Any (required)</td></tr><tr><td>sep</td><td>Separator to use (default /)</td><td>string</td></tr><tr><td>path_type</td><td>Type of path (e.g. &lsquo;windows&rsquo;)</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Build a path by joining all components.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>path_join</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#path_join>path_join</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=path_join>path_join</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>components</td><td>Path components to join.</td><td>list of Any (required)</td></tr><tr><td>sep</td><td>Separator to use (default /)</td><td>string</td></tr><tr><td>path_type</td><td>Type of path (e.g. &lsquo;windows&rsquo;)</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Build a path by joining all components.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/path_split/index.html b/vql_reference/basic/path_split/index.html
index f75212f48e6..191976a0798 100644
--- a/vql_reference/basic/path_split/index.html
+++ b/vql_reference/basic/path_split/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>path_split :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/path_split/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/path_split/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>path_split</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#path_split>path_split</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=path_split>path_split</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>Path to split into components.</td><td>Any (required)</td></tr><tr><td>path_type</td><td>Type of path (e.g. &lsquo;windows&rsquo;)</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Split a path into components. Note this is more complex than just split() because it takes into account path escaping.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>path_split</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#path_split>path_split</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=path_split>path_split</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>Path to split into components.</td><td>Any (required)</td></tr><tr><td>path_type</td><td>Type of path (e.g. &lsquo;windows&rsquo;)</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Split a path into components. Note this is more complex than just split() because it takes into account path escaping.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/query/index.html b/vql_reference/basic/query/index.html
index 0fe25cb30ca..39f9b27e73d 100644
--- a/vql_reference/basic/query/index.html
+++ b/vql_reference/basic/query/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>query :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/query/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/query/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>query</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#query>query</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=query>query</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>vql</td><td></td><td>StoredQuery (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Launch a subquery and materialize it into a list of rows.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>query</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#query>query</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=query>query</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>vql</td><td></td><td>StoredQuery (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Launch a subquery and materialize it into a list of rows.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/rand/index.html b/vql_reference/basic/rand/index.html
index fb7075c37bd..67ee6f44cb1 100644
--- a/vql_reference/basic/rand/index.html
+++ b/vql_reference/basic/rand/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>rand :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/rand/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/rand/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>rand</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#rand>rand</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=rand>rand</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>range</td><td>Selects a random number up to this range.</td><td>int64</td></tr></tbody></table><h3 id=description>Description</h3><p>Selects a random number.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>rand</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#rand>rand</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=rand>rand</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>range</td><td>Selects a random number up to this range.</td><td>int64</td></tr></tbody></table><h3 id=description>Description</h3><p>Selects a random number.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/range/index.html b/vql_reference/basic/range/index.html
index c18efe65a5b..d4a21535d72 100644
--- a/vql_reference/basic/range/index.html
+++ b/vql_reference/basic/range/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>range :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/range/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/range/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>range</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#range>range</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=range>range</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>start</td><td>Start index (0 based - default 0)</td><td>int64</td></tr><tr><td>end</td><td>End index (0 based)</td><td>int64 (required)</td></tr><tr><td>step</td><td>Step (default 1)</td><td>int64</td></tr></tbody></table><h3 id=description>Description</h3><p>Iterate over range.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>range</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#range>range</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=range>range</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>start</td><td>Start index (0 based - default 0)</td><td>int64</td></tr><tr><td>end</td><td>End index (0 based)</td><td>int64 (required)</td></tr><tr><td>step</td><td>Step (default 1)</td><td>int64</td></tr></tbody></table><h3 id=description>Description</h3><p>Iterate over range.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/read_file/index.html b/vql_reference/basic/read_file/index.html
index a0ac4585eaf..723caee4fbd 100644
--- a/vql_reference/basic/read_file/index.html
+++ b/vql_reference/basic/read_file/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>read_file :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/read_file/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/read_file/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>read_file</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#read_file>read_file</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=read_file>read_file</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>length</td><td>Max length of the file to read.</td><td>int</td></tr><tr><td>offset</td><td>Where to read from the file.</td><td>int64</td></tr><tr><td>filename</td><td>One or more files to open.</td><td>OSPath (required)</td></tr><tr><td>accessor</td><td>An accessor to use.</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Read a file into a string.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Read a file into a string.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/regex_transform/index.html b/vql_reference/basic/regex_transform/index.html
index b2b4673f560..f1b80ddb879 100644
--- a/vql_reference/basic/regex_transform/index.html
+++ b/vql_reference/basic/regex_transform/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>regex_transform :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/regex_transform/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/regex_transform/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -73,4 +73,4 @@
    `^Hello`=&quot;Goodbye&quot;,
    `world`=&quot;Space&quot;), key=&quot;A&quot;)
 FROM scope()
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/relpath/index.html b/vql_reference/basic/relpath/index.html
index b73aeafe94d..abe8060d060 100644
--- a/vql_reference/basic/relpath/index.html
+++ b/vql_reference/basic/relpath/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>relpath :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/relpath/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/relpath/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>relpath</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#relpath>relpath</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=relpath>relpath</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>Extract directory name of path</td><td>string (required)</td></tr><tr><td>base</td><td>The base of the path</td><td>string (required)</td></tr><tr><td>sep</td><td>Separator to use (default native)</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Return the relative path of .</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>relpath</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#relpath>relpath</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=relpath>relpath</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>Extract directory name of path</td><td>string (required)</td></tr><tr><td>base</td><td>The base of the path</td><td>string (required)</td></tr><tr><td>sep</td><td>Separator to use (default native)</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Return the relative path of .</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/scope/index.html b/vql_reference/basic/scope/index.html
index 0f31b0ad09a..f82f02425f5 100644
--- a/vql_reference/basic/scope/index.html
+++ b/vql_reference/basic/scope/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>scope :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/scope/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/scope/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>scope</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#scope>scope</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=scope>scope</h2><p><span class='vql_type pull-right page-header'>Function</span></p><h3 id=description>Description</h3><p>return the scope.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>scope</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#scope>scope</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=scope>scope</h2><p><span class='vql_type pull-right page-header'>Function</span></p><h3 id=description>Description</h3><p>return the scope.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/serialize/index.html b/vql_reference/basic/serialize/index.html
index a14000c431e..3f20780ca0c 100644
--- a/vql_reference/basic/serialize/index.html
+++ b/vql_reference/basic/serialize/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>serialize :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/serialize/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/serialize/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>serialize</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#serialize>serialize</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=serialize>serialize</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>item</td><td>The item to encode</td><td>Any (required)</td></tr><tr><td>format</td><td>Encoding format (csv,json,yaml,hex,base64)</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Encode an object as a string (csv or json).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>serialize</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#serialize>serialize</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=serialize>serialize</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>item</td><td>The item to encode</td><td>Any (required)</td></tr><tr><td>format</td><td>Encoding format (csv,json,yaml,hex,base64)</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Encode an object as a string (csv or json).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/set/index.html b/vql_reference/basic/set/index.html
index 67acca2b8e5..a28c1a3ffff 100644
--- a/vql_reference/basic/set/index.html
+++ b/vql_reference/basic/set/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>set :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/set/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/set/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>set</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#set>set</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=set>set</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>item</td><td>A dict to set</td><td>Any (required)</td></tr><tr><td>field</td><td>The field to set</td><td>string (required)</td></tr><tr><td>value</td><td></td><td>Any (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Sets the member field of the item. If item is omitted sets the scope.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>set</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#set>set</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=set>set</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>item</td><td>A dict to set</td><td>Any (required)</td></tr><tr><td>field</td><td>The field to set</td><td>string (required)</td></tr><tr><td>value</td><td></td><td>Any (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Sets the member field of the item. If item is omitted sets the scope.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/sleep/index.html b/vql_reference/basic/sleep/index.html
index b8f82be8b34..5ed3e9fdb6e 100644
--- a/vql_reference/basic/sleep/index.html
+++ b/vql_reference/basic/sleep/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>sleep :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/sleep/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/sleep/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>sleep</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#sleep>sleep</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=sleep>sleep</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>time</td><td>The number of seconds to sleep</td><td>int64</td></tr><tr><td>ms</td><td>The number of ms to sleep</td><td>int64</td></tr></tbody></table><h3 id=description>Description</h3><p>Sleep for the specified number of seconds. Always returns true.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>sleep</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#sleep>sleep</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=sleep>sleep</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>time</td><td>The number of seconds to sleep</td><td>int64</td></tr><tr><td>ms</td><td>The number of ms to sleep</td><td>int64</td></tr></tbody></table><h3 id=description>Description</h3><p>Sleep for the specified number of seconds. Always returns true.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/slice/index.html b/vql_reference/basic/slice/index.html
index 4edbf2f7288..e22b17af7da 100644
--- a/vql_reference/basic/slice/index.html
+++ b/vql_reference/basic/slice/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>slice :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/slice/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/slice/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>slice</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#slice>slice</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=slice>slice</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>list</td><td>A list of items to slice</td><td>Any (required)</td></tr><tr><td>start</td><td>Start index (0 based)</td><td>uint64 (required)</td></tr><tr><td>end</td><td>End index (0 based)</td><td>uint64 (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Slice an array.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>slice</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#slice>slice</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=slice>slice</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>list</td><td>A list of items to slice</td><td>Any (required)</td></tr><tr><td>start</td><td>Start index (0 based)</td><td>uint64 (required)</td></tr><tr><td>end</td><td>End index (0 based)</td><td>uint64 (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Slice an array.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/split/index.html b/vql_reference/basic/split/index.html
index ba6f9104d39..677cc545466 100644
--- a/vql_reference/basic/split/index.html
+++ b/vql_reference/basic/split/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>split :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/split/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/split/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>split</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#split>split</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=split>split</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>The value to split</td><td>string (required)</td></tr><tr><td>sep</td><td>The separator that will be used to split</td><td>string</td></tr><tr><td>sep_string</td><td>The separator as string that will be used to split</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Splits a string into an array based on a regexp separator.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>split</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#split>split</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=split>split</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>The value to split</td><td>string (required)</td></tr><tr><td>sep</td><td>The separator that will be used to split</td><td>string</td></tr><tr><td>sep_string</td><td>The separator as string that will be used to split</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Splits a string into an array based on a regexp separator.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/str/index.html b/vql_reference/basic/str/index.html
index a49f9bad35f..33cc854c32d 100644
--- a/vql_reference/basic/str/index.html
+++ b/vql_reference/basic/str/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>str :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/str/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/str/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>str</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#str>str</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=str>str</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>str</td><td>The string to normalize</td><td>Any (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Returns the string representation of provided data</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>str</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#str>str</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=str>str</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>str</td><td>The string to normalize</td><td>Any (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Returns the string representation of provided data</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/strip/index.html b/vql_reference/basic/strip/index.html
index e2695d0f498..9f6bf820079 100644
--- a/vql_reference/basic/strip/index.html
+++ b/vql_reference/basic/strip/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>strip :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/strip/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/strip/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 <span class=links>strip</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#strip>strip</a><ul><li><a href=#description>Description</a></li><li><a href=#examples>Examples</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=strip>strip</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>The string to strip</td><td>string (required)</td></tr><tr><td>prefix</td><td>The prefix to strip</td><td>string</td></tr><tr><td>suffix</td><td>The suffix to strip</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Strip prefix and/or suffix from a string</p><p>If neither prefix nor suffix are provided, leading and trailing
 whitespace is stripped.</p><h3 id=examples>Examples</h3><pre><code class=language-vql>strip(string=&quot;&gt;&gt;  lorem ipsum  &lt;&lt;&quot;, prefix=&quot;&gt;&gt;&quot;, suffix=&quot;&lt;&lt;&quot;) -&gt; &quot;  lorem ipsum  &quot;
 </code></pre><pre><code class=language-vql>strip(string=&quot;   lorem ipsum   &quot;) -&gt; &quot;lorem ipsum&quot;
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/substr/index.html b/vql_reference/basic/substr/index.html
index d81f8c32d9f..f2bd25a0396 100644
--- a/vql_reference/basic/substr/index.html
+++ b/vql_reference/basic/substr/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>substr :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/substr/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/substr/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>substr</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#substr>substr</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=substr>substr</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>str</td><td>The string to shorten</td><td>string (required)</td></tr><tr><td>start</td><td>Beginning index of substring</td><td>int</td></tr><tr><td>end</td><td>End index of substring</td><td>int</td></tr></tbody></table><h3 id=description>Description</h3><p>Create a substring from a string</p><p>If start is not provided, the beginning of the string is used.
-If end is not provided, the end of the string are used.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+If end is not provided, the end of the string are used.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/sum/index.html b/vql_reference/basic/sum/index.html
index eb74fd56d35..0da724f551e 100644
--- a/vql_reference/basic/sum/index.html
+++ b/vql_reference/basic/sum/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>sum :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/sum/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/sum/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>sum</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#sum>sum</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=sum>sum</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>item</td><td></td><td>int64 (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Sums the items.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>sum</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#sum>sum</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=sum>sum</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>item</td><td></td><td>int64 (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Sums the items.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/tempdir/index.html b/vql_reference/basic/tempdir/index.html
index 74f0afd7465..103dd73a9d1 100644
--- a/vql_reference/basic/tempdir/index.html
+++ b/vql_reference/basic/tempdir/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>tempdir :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/tempdir/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/tempdir/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>tempdir</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#tempdir>tempdir</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=tempdir>tempdir</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>remove_last</td><td>If set we delay removal as much as possible.</td><td>bool</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_WRITE</i></p><h3 id=description>Description</h3><p>Create a temporary directory. The directory will be removed when the query ends.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_WRITE</i></p><h3 id=description>Description</h3><p>Create a temporary directory. The directory will be removed when the query ends.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/timestamp/index.html b/vql_reference/basic/timestamp/index.html
index 5e16b9eb9f3..2c2ef2bf4d2 100644
--- a/vql_reference/basic/timestamp/index.html
+++ b/vql_reference/basic/timestamp/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>timestamp :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/timestamp/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/timestamp/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -87,4 +87,4 @@
 time is layed out. It represents a template for a timestamp that
 <strong>must</strong> use the following date constants</p><ul><li>Year: &ldquo;2006&rdquo; &ldquo;06&rdquo;</li><li>Month: &ldquo;Jan&rdquo; &ldquo;January&rdquo;</li><li>Textual day of the week: &ldquo;Mon&rdquo; &ldquo;Monday&rdquo;</li><li>Numeric day of the month: &ldquo;2&rdquo; &ldquo;_2&rdquo; &ldquo;02&rdquo;</li><li>Numeric day of the year: &ldquo;__2&rdquo; &ldquo;002&rdquo;</li><li>Hour: &ldquo;15&rdquo; &ldquo;3&rdquo; &ldquo;03&rdquo; (PM or AM)</li><li>Minute: &ldquo;4&rdquo; &ldquo;04&rdquo;</li><li>Second: &ldquo;5&rdquo; &ldquo;05&rdquo;</li><li>AM/PM mark: &ldquo;PM&rdquo;</li><li>&ldquo;-0700&rdquo; ±hhmm</li><li>&ldquo;-07:00&rdquo; ±hh:mm</li><li>&ldquo;-07&rdquo; ±hh</li></ul><pre><code class=language-vql>SELECT timestamp(string=&quot;8/30/2021 6:01:28 PM&quot;,
                  format=&quot;1/2/2006 3:04:05 PM&quot;)
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/to_dict/index.html b/vql_reference/basic/to_dict/index.html
index 90236592536..c9800d267d7 100644
--- a/vql_reference/basic/to_dict/index.html
+++ b/vql_reference/basic/to_dict/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>to_dict :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/to_dict/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/to_dict/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -86,4 +86,4 @@
 
 SELECT Pid, get(item=PidLookup, field=str(str=Pid))
 FROM pslist()
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/unhex/index.html b/vql_reference/basic/unhex/index.html
index 945515031b6..b378ce8bdfc 100644
--- a/vql_reference/basic/unhex/index.html
+++ b/vql_reference/basic/unhex/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>unhex :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/unhex/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/unhex/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 <span class=links>unhex</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#unhex>unhex</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=unhex>unhex</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>Hex string to decode</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Apply hex decoding to the string.</p><p>A hex encoded string consists of two hex digits per byte -
 therefore valid hex encoded strings have an even length.</p><p>For example: &ldquo;01230F0a&rdquo;</p><p>Note: If you need to encode a string as hex encoded string you can
 use the format function:</p><pre><code class=language-vql>format(format=&quot;%02x&quot;, args=&quot;Hello&quot;) -&gt; &quot;48656c6c6f&quot;
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/unzip/index.html b/vql_reference/basic/unzip/index.html
index c737e534477..6f8429b3d36 100644
--- a/vql_reference/basic/unzip/index.html
+++ b/vql_reference/basic/unzip/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>unzip :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/unzip/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/unzip/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -72,4 +72,4 @@
 <i class="linkcolour label pull-right label-success">FILESYSTEM_WRITE</i>
 <i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Unzips a file into a directory.</p><p>This plugin supports a number of compression formats:</p><ol><li>Zip files</li><li>Tar gz files.</li></ol><p>The type of the file will be detected by the file extension, or
 else you can force a type using the <code>type</code> parameter (<code>tgz</code> or
-<code>zip</code>).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<code>zip</code>).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/upcase/index.html b/vql_reference/basic/upcase/index.html
index 52236b1e5fd..d3b6ae126d8 100644
--- a/vql_reference/basic/upcase/index.html
+++ b/vql_reference/basic/upcase/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>upcase :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/upcase/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/upcase/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>upcase</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#upcase>upcase</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=upcase>upcase</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>The string to process</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Returns an uppercase version of the string.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>upcase</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#upcase>upcase</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=upcase>upcase</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>The string to process</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Returns an uppercase version of the string.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/upload_sftp/index.html b/vql_reference/basic/upload_sftp/index.html
index e0485b919ac..63149cad3f6 100644
--- a/vql_reference/basic/upload_sftp/index.html
+++ b/vql_reference/basic/upload_sftp/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>upload_sftp :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/upload_sftp/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/upload_sftp/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>upload_sftp</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#upload_sftp>upload_sftp</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=upload_sftp>upload_sftp</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>file</td><td>The file to upload</td><td>OSPath (required)</td></tr><tr><td>name</td><td>The name of the file that should be stored on the server (may contain the path)</td><td>string</td></tr><tr><td>user</td><td>The username to connect to the endpoint with</td><td>string (required)</td></tr><tr><td>path</td><td>Path on server to upload file to (will be prepended to name)</td><td>string</td></tr><tr><td>accessor</td><td>The accessor to use</td><td>string</td></tr><tr><td>privatekey</td><td>The private key to use</td><td>string (required)</td></tr><tr><td>endpoint</td><td>The Endpoint to use including port number (e.g. 192.168.1.1:22 )</td><td>string (required)</td></tr><tr><td>hostkey</td><td>Host key to verify. Blank to disable</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Upload files to SFTP.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Upload files to SFTP.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/upload_webdav/index.html b/vql_reference/basic/upload_webdav/index.html
index b73ac00cc6a..a99c2358e18 100644
--- a/vql_reference/basic/upload_webdav/index.html
+++ b/vql_reference/basic/upload_webdav/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>upload_webdav :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/upload_webdav/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/upload_webdav/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>upload_webdav</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#upload_webdav>upload_webdav</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=upload_webdav>upload_webdav</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>file</td><td>The file to upload</td><td>OSPath (required)</td></tr><tr><td>name</td><td>The name that the file should have on the server</td><td>string</td></tr><tr><td>accessor</td><td>The accessor to use</td><td>string</td></tr><tr><td>url</td><td>The WebDAV url</td><td>string (required)</td></tr><tr><td>basic_auth_user</td><td>The username to use in HTTP basic auth</td><td>string</td></tr><tr><td>basic_auth_password</td><td>The password to use in HTTP basic auth</td><td>string</td></tr><tr><td>noverifycert</td><td>Skip TLS Verification (deprecated in favor of SkipVerify)</td><td>bool</td></tr><tr><td>skip_verify</td><td>Skip TLS Verification</td><td>bool</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Upload files to a WebDAV server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Upload files to a WebDAV server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/url/index.html b/vql_reference/basic/url/index.html
index 68aa163bb2d..58a3523d843 100644
--- a/vql_reference/basic/url/index.html
+++ b/vql_reference/basic/url/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>url :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/url/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/url/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -77,4 +77,4 @@
 its file names to consist of URLs. The Zip accessor interprets the URL
 in the following way:</p><ul><li>The scheme is the delegate accessor to use.</li><li>The path is the delegate accessor&rsquo;s filename</li><li>The fragment is used by the zip accessor to retrieve the zip member itself.</li></ul><p>In this case it is critical to properly escape each level - it is not
 possible in the general case to simply append strings. You need to use
-the <code>url()</code> function to build the proper url.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+the <code>url()</code> function to build the proper url.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/utf16/index.html b/vql_reference/basic/utf16/index.html
index 57c1de1f9b7..01a751ae77d 100644
--- a/vql_reference/basic/utf16/index.html
+++ b/vql_reference/basic/utf16/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>utf16 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/utf16/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/utf16/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>utf16</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#utf16>utf16</a><ul><li><a href=#description>Description</a></li><li><a href=#example>Example</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=utf16>utf16</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>A string to decode</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Parse input from utf16.</p><h3 id=example>Example</h3><pre><code class=language-vql>utf16(string='A\x00B\x00C\x00D\x00') -&gt; &quot;ABCD&quot;
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/utf16_encode/index.html b/vql_reference/basic/utf16_encode/index.html
index ad71d6d725c..19e9d8b6d14 100644
--- a/vql_reference/basic/utf16_encode/index.html
+++ b/vql_reference/basic/utf16_encode/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>utf16_encode :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/utf16_encode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/utf16_encode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>utf16_encode</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#utf16_encode>utf16_encode</a><ul><li><a href=#description>Description</a></li><li><a href=#example>Example</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=utf16_encode>utf16_encode</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>A string to decode</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Encode a string to utf16 bytes.</p><h3 id=example>Example</h3><pre><code class=language-vql>utf16_encode(string=&quot;ABCD&quot;) -&gt; &quot;A\u0000B\u0000C\u0000D\u0000&quot;
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/uuid/index.html b/vql_reference/basic/uuid/index.html
index 69caf1b009c..ff4be2eac2a 100644
--- a/vql_reference/basic/uuid/index.html
+++ b/vql_reference/basic/uuid/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>uuid :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/uuid/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/uuid/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>uuid</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#uuid>uuid</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=uuid>uuid</h2><p><span class='vql_type pull-right page-header'>Function</span></p><h3 id=description>Description</h3><p>Generate a UUID.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>uuid</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#uuid>uuid</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=uuid>uuid</h2><p><span class='vql_type pull-right page-header'>Function</span></p><h3 id=description>Description</h3><p>Generate a UUID.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/basic/version/index.html b/vql_reference/basic/version/index.html
index dd213cf8b81..be9b073248e 100644
--- a/vql_reference/basic/version/index.html
+++ b/vql_reference/basic/version/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>version :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/version/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/basic/version/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -77,4 +77,4 @@
   condition=version(plugin=&quot;glob&quot;) &gt;= 1,
   then=NewQuery,
   else=LegacyQuery)
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/event/clock/index.html b/vql_reference/event/clock/index.html
index c4a2bb471b6..0b3c33777b8 100644
--- a/vql_reference/event/clock/index.html
+++ b/vql_reference/event/clock/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>clock :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/clock/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/clock/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -75,4 +75,4 @@
 object. You can access its unix epoch time with the Sec column.</p><h3 id=example>Example</h3><p>The following will generate an event every 10 seconds.</p><pre><code class=language-vql>SELECT Second FROM clock(period=10)
 </code></pre><p>The <code>start</code> parameter can be used to schedule the plugin to start
 at a particular time. This can be an integer (which will be
-interpreted as seconds since the epoch), a string or a time value.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+interpreted as seconds since the epoch), a string or a time value.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/event/combine/index.html b/vql_reference/event/combine/index.html
index b4ec2ec4719..78adb275e45 100644
--- a/vql_reference/event/combine/index.html
+++ b/vql_reference/event/combine/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>combine :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/combine/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/combine/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>combine</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#combine>combine</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=combine>combine</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>Combine the output of several queries into the same result set.A convenience plugin acting like chain(async=TRUE).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>combine</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#combine>combine</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=combine>combine</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>Combine the output of several queries into the same result set.A convenience plugin acting like chain(async=TRUE).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/event/diff/index.html b/vql_reference/event/diff/index.html
index 2ce4ad45f08..e4c2b743eea 100644
--- a/vql_reference/event/diff/index.html
+++ b/vql_reference/event/diff/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>diff :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/diff/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/diff/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -102,4 +102,4 @@
 matching the regex.</li><li>When a process is added or removed, the diff plugin will emit a
 row</li><li>The query is only interested in a removed process</li><li>After a single removed process is found the limit is reached
 and the query exits.</li></ol><p>Sometimes we need to wait for a subprocess to exist if it detaches
-from the terminal immediately but does some work in the background.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+from the terminal immediately but does some work in the background.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/event/fifo/index.html b/vql_reference/event/fifo/index.html
index a80e3a62794..6a5f690c6aa 100644
--- a/vql_reference/event/fifo/index.html
+++ b/vql_reference/event/fifo/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>fifo :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/fifo/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/fifo/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -105,4 +105,4 @@
    WHERE FailedEventData.SubjectUserName = SuccessEventData.SubjectUserName
    GROUP BY LogonTime
       })  WHERE Count &gt; atoi(string=failureCount)
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/event/index.html b/vql_reference/event/index.html
index 07def427192..977b42e03f0 100644
--- a/vql_reference/event/index.html
+++ b/vql_reference/event/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Event Plugins :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -74,4 +74,4 @@
 artifacts are specified in the <code>Events</code> section of the server
 configuration file. When clients connect to the server, they receive a
 list of monitoring artifacts they are to run. The client runs all
-artifacts in parallel and their results are streamed to the server.</p><table><thead><tr><th>Plugin/Function</th><th><span class=vql_type>Type</span></th><th>Description</th></tr></thead><tbody><tr><td><a href=clock>clock</a></td><td><span class=vql_type>Plugin</span></td><td>Generate a timestamp periodically</td></tr><tr><td><a href=combine>combine</a></td><td><span class=vql_type>Plugin</span></td><td>Combine the output of several queries into the same result set</td></tr><tr><td><a href=diff>diff</a></td><td><span class=vql_type>Plugin</span></td><td>Executes &lsquo;query&rsquo; periodically and emit differences from the last query</td></tr><tr><td><a href=fifo>fifo</a></td><td><span class=vql_type>Plugin</span></td><td>Executes &lsquo;query&rsquo; and cache a number of rows from it</td></tr><tr><td><a href=send_event>send_event</a></td><td><span class=vql_type>Function</span></td><td>Sends an event to a server event monitoring queue</td></tr><tr><td><a href=watch_auditd>watch_auditd</a></td><td><span class=vql_type>Plugin</span></td><td>Watch log files generated by auditd</td></tr><tr><td><a href=watch_csv>watch_csv</a></td><td><span class=vql_type>Plugin</span></td><td>Watch a CSV file and stream events from it</td></tr><tr><td><a href=watch_etw>watch_etw</a></td><td><span class=vql_type>Plugin</span></td><td>Watch for events from an ETW provider</td></tr><tr><td><a href=watch_evtx>watch_evtx</a></td><td><span class=vql_type>Plugin</span></td><td>Watch an EVTX file and stream events from it</td></tr><tr><td><a href=watch_monitoring>watch_monitoring</a></td><td><span class=vql_type>Plugin</span></td><td>Watch clients&rsquo; monitoring log</td></tr><tr><td><a href=watch_syslog>watch_syslog</a></td><td><span class=vql_type>Plugin</span></td><td>Watch a syslog file and stream events from it</td></tr><tr><td><a href=watch_usn>watch_usn</a></td><td><span class=vql_type>Plugin</span></td><td>Watch the USN journal from a device</td></tr><tr><td><a href=wmi_events>wmi_events</a></td><td><span class=vql_type>Plugin</span></td><td>Executes an evented WMI queries asynchronously</td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+artifacts in parallel and their results are streamed to the server.</p><table><thead><tr><th>Plugin/Function</th><th><span class=vql_type>Type</span></th><th>Description</th></tr></thead><tbody><tr><td><a href=clock>clock</a></td><td><span class=vql_type>Plugin</span></td><td>Generate a timestamp periodically</td></tr><tr><td><a href=combine>combine</a></td><td><span class=vql_type>Plugin</span></td><td>Combine the output of several queries into the same result set</td></tr><tr><td><a href=diff>diff</a></td><td><span class=vql_type>Plugin</span></td><td>Executes &lsquo;query&rsquo; periodically and emit differences from the last query</td></tr><tr><td><a href=fifo>fifo</a></td><td><span class=vql_type>Plugin</span></td><td>Executes &lsquo;query&rsquo; and cache a number of rows from it</td></tr><tr><td><a href=send_event>send_event</a></td><td><span class=vql_type>Function</span></td><td>Sends an event to a server event monitoring queue</td></tr><tr><td><a href=watch_auditd>watch_auditd</a></td><td><span class=vql_type>Plugin</span></td><td>Watch log files generated by auditd</td></tr><tr><td><a href=watch_csv>watch_csv</a></td><td><span class=vql_type>Plugin</span></td><td>Watch a CSV file and stream events from it</td></tr><tr><td><a href=watch_etw>watch_etw</a></td><td><span class=vql_type>Plugin</span></td><td>Watch for events from an ETW provider</td></tr><tr><td><a href=watch_evtx>watch_evtx</a></td><td><span class=vql_type>Plugin</span></td><td>Watch an EVTX file and stream events from it</td></tr><tr><td><a href=watch_monitoring>watch_monitoring</a></td><td><span class=vql_type>Plugin</span></td><td>Watch clients&rsquo; monitoring log</td></tr><tr><td><a href=watch_syslog>watch_syslog</a></td><td><span class=vql_type>Plugin</span></td><td>Watch a syslog file and stream events from it</td></tr><tr><td><a href=watch_usn>watch_usn</a></td><td><span class=vql_type>Plugin</span></td><td>Watch the USN journal from a device</td></tr><tr><td><a href=wmi_events>wmi_events</a></td><td><span class=vql_type>Plugin</span></td><td>Executes an evented WMI queries asynchronously</td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/event/send_event/index.html b/vql_reference/event/send_event/index.html
index 47f5bbbd8cb..3acca97748d 100644
--- a/vql_reference/event/send_event/index.html
+++ b/vql_reference/event/send_event/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>send_event :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/send_event/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/send_event/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -72,4 +72,4 @@
 <i class="linkcolour label pull-right label-success">SERVER_ADMIN</i>
 <i class="linkcolour label pull-right label-success">PUBLISH</i></p><h3 id=description>Description</h3><p>Sends an event to a server event monitoring queue.</p><p>This is used to send an event to a waiting server event monitoring
 artifact (either as a VQL query running on the server or perhaps
-an external program waiting for this event via the API.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+an external program waiting for this event via the API.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/event/watch_auditd/index.html b/vql_reference/event/watch_auditd/index.html
index 569b9157c4c..dc64e93156c 100644
--- a/vql_reference/event/watch_auditd/index.html
+++ b/vql_reference/event/watch_auditd/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>watch_auditd :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/watch_auditd/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/watch_auditd/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>watch_auditd</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#watch_auditd>watch_auditd</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=watch_auditd>watch_auditd</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>filename</td><td>A list of log files to parse.</td><td>list of OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr><tr><td>buffer_size</td><td>Maximum size of line buffer.</td><td>int</td></tr></tbody></table><h3 id=description>Description</h3><p>Watch log files generated by auditd.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>watch_auditd</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#watch_auditd>watch_auditd</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=watch_auditd>watch_auditd</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>filename</td><td>A list of log files to parse.</td><td>list of OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr><tr><td>buffer_size</td><td>Maximum size of line buffer.</td><td>int</td></tr></tbody></table><h3 id=description>Description</h3><p>Watch log files generated by auditd.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/event/watch_csv/index.html b/vql_reference/event/watch_csv/index.html
index 575a8fe92c5..6ca1e57da89 100644
--- a/vql_reference/event/watch_csv/index.html
+++ b/vql_reference/event/watch_csv/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>watch_csv :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/watch_csv/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/watch_csv/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 <span class=links>watch_csv</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#watch_csv>watch_csv</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=watch_csv>watch_csv</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>filename</td><td>CSV files to open</td><td>list of OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use</td><td>string</td></tr><tr><td>auto_headers</td><td>If unset the first row is headers</td><td>bool</td></tr><tr><td>separator</td><td>Comma separator (default &lsquo;,&rsquo;)</td><td>string</td></tr><tr><td>comment</td><td>The single character that should be considered a comment</td><td>string</td></tr><tr><td>columns</td><td>The columns to use</td><td>list of string</td></tr></tbody></table><p>Required Permissions:
 <i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Watch a CSV file and stream events from it. Note: This is an event
 plugin which does not complete.</p><p>This plugin is the event version of <code>parse_csv()</code>. When the CSV file
-grows this plugin will emit the new rows.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+grows this plugin will emit the new rows.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/event/watch_etw/index.html b/vql_reference/event/watch_etw/index.html
index ccde6209b40..efc91bdad45 100644
--- a/vql_reference/event/watch_etw/index.html
+++ b/vql_reference/event/watch_etw/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>watch_etw :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/watch_etw/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/watch_etw/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>watch_etw</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#watch_etw>watch_etw</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=watch_etw>watch_etw</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>name</td><td>A session name</td><td>string</td></tr><tr><td>guid</td><td>A Provider GUID to watch</td><td>string (required)</td></tr><tr><td>any</td><td>Any Keywords</td><td>uint64</td></tr><tr><td>all</td><td>All Keywords</td><td>uint64</td></tr><tr><td>level</td><td>Log level (0-5)</td><td>int64</td></tr></tbody></table><h3 id=description>Description</h3><p>Watch for events from an ETW provider.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>watch_etw</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#watch_etw>watch_etw</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=watch_etw>watch_etw</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>name</td><td>A session name</td><td>string</td></tr><tr><td>guid</td><td>A Provider GUID to watch</td><td>string (required)</td></tr><tr><td>any</td><td>Any Keywords</td><td>uint64</td></tr><tr><td>all</td><td>All Keywords</td><td>uint64</td></tr><tr><td>level</td><td>Log level (0-5)</td><td>int64</td></tr></tbody></table><h3 id=description>Description</h3><p>Watch for events from an ETW provider.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/event/watch_evtx/index.html b/vql_reference/event/watch_evtx/index.html
index bf9d4330bb1..1c49987ed8e 100644
--- a/vql_reference/event/watch_evtx/index.html
+++ b/vql_reference/event/watch_evtx/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>watch_evtx :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/watch_evtx/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/watch_evtx/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -73,4 +73,4 @@
 log and so this plugin&rsquo;s event may be delayed. For some applications
 this results in a race condition with the event itself - for example,
 files mentioned in the event may already be removed by the time the
-event is triggered.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+event is triggered.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/event/watch_monitoring/index.html b/vql_reference/event/watch_monitoring/index.html
index b3e3de2352a..44a5f26d246 100644
--- a/vql_reference/event/watch_monitoring/index.html
+++ b/vql_reference/event/watch_monitoring/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>watch_monitoring :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/watch_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/watch_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>watch_monitoring</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#watch_monitoring>watch_monitoring</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=watch_monitoring>watch_monitoring</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>artifact</td><td>The artifact to watch</td><td>string</td></tr></tbody></table><p>Required Permissions:
 <i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Watch clients&rsquo; monitoring log. This is an event plugin. This
-plugin will produce events from all clients.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+plugin will produce events from all clients.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/event/watch_syslog/index.html b/vql_reference/event/watch_syslog/index.html
index 73c96a29f79..1551fff7673 100644
--- a/vql_reference/event/watch_syslog/index.html
+++ b/vql_reference/event/watch_syslog/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>watch_syslog :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/watch_syslog/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/watch_syslog/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>watch_syslog</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#watch_syslog>watch_syslog</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=watch_syslog>watch_syslog</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>filename</td><td>A list of log files to parse.</td><td>list of OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr><tr><td>buffer_size</td><td>Maximum size of line buffer.</td><td>int</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Watch a syslog file and stream events from it.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Watch a syslog file and stream events from it.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/event/watch_usn/index.html b/vql_reference/event/watch_usn/index.html
index c591e83c417..cc010d96da4 100644
--- a/vql_reference/event/watch_usn/index.html
+++ b/vql_reference/event/watch_usn/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>watch_usn :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/watch_usn/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/watch_usn/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>watch_usn</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#watch_usn>watch_usn</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=watch_usn>watch_usn</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>device</td><td>The device file to open (as an NTFS device).</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Watch the USN journal from a device.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>watch_usn</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#watch_usn>watch_usn</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=watch_usn>watch_usn</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>device</td><td>The device file to open (as an NTFS device).</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Watch the USN journal from a device.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/event/wmi_events/index.html b/vql_reference/event/wmi_events/index.html
index 77c1d9ac907..fcd2aaebf5a 100644
--- a/vql_reference/event/wmi_events/index.html
+++ b/vql_reference/event/wmi_events/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>wmi_events :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/wmi_events/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/event/wmi_events/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>wmi_events</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#wmi_events>wmi_events</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=wmi_events>wmi_events</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>query</td><td>WMI query to run.</td><td>string (required)</td></tr><tr><td>namespace</td><td>WMI namespace</td><td>string (required)</td></tr><tr><td>wait</td><td>Wait this many seconds for events and then quit.</td><td>int64 (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Executes an evented WMI queries asynchronously.</p><p>This plugin sets up a <a href=https://docs.microsoft.com/en-us/windows/desktop/wmisdk/receiving-a-wmi-event>WMI event</a> listener query.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>wmi_events</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#wmi_events>wmi_events</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=wmi_events>wmi_events</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>query</td><td>WMI query to run.</td><td>string (required)</td></tr><tr><td>namespace</td><td>WMI namespace</td><td>string (required)</td></tr><tr><td>wait</td><td>Wait this many seconds for events and then quit.</td><td>int64 (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Executes an evented WMI queries asynchronously.</p><p>This plugin sets up a <a href=https://docs.microsoft.com/en-us/windows/desktop/wmisdk/receiving-a-wmi-event>WMI event</a> listener query.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/experimental/index.html b/vql_reference/experimental/index.html
index 1a7d1beb7fe..f35d5013ea4 100644
--- a/vql_reference/experimental/index.html
+++ b/vql_reference/experimental/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Experimental :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/experimental/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/experimental/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 <span class=links>Experimental</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Experimental</h1><p>Velociraptor is evolving quickly. We sometime implement
 functionality which may not remain in Velociraptor. This page
 documents some of the experimental features. If you find them
-useful, please let us know!</p><table><thead><tr><th>Plugin/Function</th><th><span class=vql_type>Type</span></th><th>Description</th></tr></thead><tbody><tr><td><a href=js>js</a></td><td><span class=vql_type>Function</span></td><td>Compile and run javascript code</td></tr><tr><td><a href=js_call>js_call</a></td><td><span class=vql_type>Function</span></td><td>Compile and run javascript code</td></tr><tr><td><a href=sequence>sequence</a></td><td><span class=vql_type>Plugin</span></td><td>Combines the output of many queries into an in memory fifo</td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+useful, please let us know!</p><table><thead><tr><th>Plugin/Function</th><th><span class=vql_type>Type</span></th><th>Description</th></tr></thead><tbody><tr><td><a href=js>js</a></td><td><span class=vql_type>Function</span></td><td>Compile and run javascript code</td></tr><tr><td><a href=js_call>js_call</a></td><td><span class=vql_type>Function</span></td><td>Compile and run javascript code</td></tr><tr><td><a href=sequence>sequence</a></td><td><span class=vql_type>Plugin</span></td><td>Combines the output of many queries into an in memory fifo</td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/experimental/js/index.html b/vql_reference/experimental/js/index.html
index 5367023bf9d..0fc37185139 100644
--- a/vql_reference/experimental/js/index.html
+++ b/vql_reference/experimental/js/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>js :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/experimental/js/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/experimental/js/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>js</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#js>js</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=js>js</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>js</td><td>The body of the javascript code.</td><td>string (required)</td></tr><tr><td>key</td><td>If set use this key to cache the JS VM.</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Compile and run javascript code.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>js</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#js>js</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=js>js</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>js</td><td>The body of the javascript code.</td><td>string (required)</td></tr><tr><td>key</td><td>If set use this key to cache the JS VM.</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Compile and run javascript code.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/experimental/js_call/index.html b/vql_reference/experimental/js_call/index.html
index c03924ba732..06c70c5ea9a 100644
--- a/vql_reference/experimental/js_call/index.html
+++ b/vql_reference/experimental/js_call/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>js_call :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/experimental/js_call/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/experimental/js_call/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>js_call</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#js_call>js_call</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=js_call>js_call</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>func</td><td>JS function to call.</td><td>string (required)</td></tr><tr><td>args</td><td>Positional args for the function.</td><td>Any</td></tr><tr><td>key</td><td>If set use this key to cache the JS VM.</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Compile and run javascript code.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>js_call</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#js_call>js_call</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=js_call>js_call</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>func</td><td>JS function to call.</td><td>string (required)</td></tr><tr><td>args</td><td>Positional args for the function.</td><td>Any</td></tr><tr><td>key</td><td>If set use this key to cache the JS VM.</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Compile and run javascript code.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/experimental/sequence/index.html b/vql_reference/experimental/sequence/index.html
index 941fc587f1b..6b0c20c6d8e 100644
--- a/vql_reference/experimental/sequence/index.html
+++ b/vql_reference/experimental/sequence/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>sequence :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/experimental/sequence/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/experimental/sequence/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -91,4 +91,4 @@
   FROM SEQUENCE
   WHERE DNSInfo AND Name
 })
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/index.html b/vql_reference/index.html
index e40b2e998fb..c80ea7c8e0e 100644
--- a/vql_reference/index.html
+++ b/vql_reference/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>VQL Reference :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -107,4 +107,4 @@
    <td class="name"></td>
    <td class="description"></td>
    <td class="type"></td>
-   </tr>`),o=n.type;n.repeated&&(o="repeated "+o),n.required&&(o+=" (required) "),s.find(".name").append(n.name),s.find(".description").append(n.description),s.find(".type").append(o),e.find("tbody").append(s)}n.find(".args").append(e)}$(".search_results").append(n)}}function getLink(e){return e.category?"/vql_reference/"+e.category+"/"+e.name:"/vql_reference/misc/"+e.name}</script><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+   </tr>`),o=n.type;n.repeated&&(o="repeated "+o),n.required&&(o+=" (required) "),s.find(".name").append(n.name),s.find(".description").append(n.description),s.find(".type").append(o),e.find("tbody").append(s)}n.find(".args").append(e)}$(".search_results").append(n)}}function getLink(e){return e.category?"/vql_reference/"+e.category+"/"+e.name:"/vql_reference/misc/"+e.name}</script><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/linux/audit/index.html b/vql_reference/linux/audit/index.html
index 80541b98394..7869e6d1fb7 100644
--- a/vql_reference/linux/audit/index.html
+++ b/vql_reference/linux/audit/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>audit :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/linux/audit/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/linux/audit/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -72,4 +72,4 @@
 <i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Register as an audit daemon in the kernel.</p><p>On Linux the audit subsystem provides real time information about
 kernel auditable events. This plugin registers as a consumer and
 returns parsed events as rows.</p><p>You should configure the audit subsystem using the <code>auditctl</code>
-binary before using this plugin.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+binary before using this plugin.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/linux/index.html b/vql_reference/linux/index.html
index b6a8edbc5dc..7335e28e1b9 100644
--- a/vql_reference/linux/index.html
+++ b/vql_reference/linux/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Linux Specific :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/linux/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/linux/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Linux Specific</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Linux Specific</h1><p>Many VQL plugins and functions provide access to the Linux
-APIs. The following are only available when running on Linux.</p><table><thead><tr><th>Plugin/Function</th><th><span class=vql_type>Type</span></th><th>Description</th></tr></thead><tbody><tr><td><a href=audit>audit</a></td><td><span class=vql_type>Plugin</span></td><td>Register as an audit daemon in the kernel</td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+APIs. The following are only available when running on Linux.</p><table><thead><tr><th>Plugin/Function</th><th><span class=vql_type>Type</span></th><th>Description</th></tr></thead><tbody><tr><td><a href=audit>audit</a></td><td><span class=vql_type>Plugin</span></td><td>Register as an audit daemon in the kernel</td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/alert/index.html b/vql_reference/misc/alert/index.html
index 69bd3d8fe2c..beeb7bfd9c2 100644
--- a/vql_reference/misc/alert/index.html
+++ b/vql_reference/misc/alert/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>alert :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/alert/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/alert/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>alert</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#alert>alert</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=alert>alert</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>name</td><td>Name of the alert.</td><td>string (required)</td></tr><tr><td>dedup</td><td>Suppress same message in this many seconds (default 7200 sec or 2 hours).</td><td>int64</td></tr><tr><td>condition</td><td>If specified we ignore the alert unless the condition is true</td><td>Any</td></tr></tbody></table><h3 id=description>Description</h3><p>Generate an alert message.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>alert</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#alert>alert</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=alert>alert</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>name</td><td>Name of the alert.</td><td>string (required)</td></tr><tr><td>dedup</td><td>Suppress same message in this many seconds (default 7200 sec or 2 hours).</td><td>int64</td></tr><tr><td>condition</td><td>If specified we ignore the alert unless the condition is true</td><td>Any</td></tr></tbody></table><h3 id=description>Description</h3><p>Generate an alert message.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/all/index.html b/vql_reference/misc/all/index.html
index af79ebfdd31..2045f04ca7f 100644
--- a/vql_reference/misc/all/index.html
+++ b/vql_reference/misc/all/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>all :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/all/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/all/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>all</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#all>all</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=all>all</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>items</td><td>The items to consider. Can be an array, subquery or stored query. Will only be lazily evaluated!</td><td>Any (required)</td></tr><tr><td>filter</td><td>A callback to consider each item</td><td>Lambda</td></tr><tr><td>regex</td><td>Optionally one or more regex can be provided for convenience</td><td>list of string</td></tr></tbody></table><h3 id=description>Description</h3><p>Returns TRUE if all items are true.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>all</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#all>all</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=all>all</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>items</td><td>The items to consider. Can be an array, subquery or stored query. Will only be lazily evaluated!</td><td>Any (required)</td></tr><tr><td>filter</td><td>A callback to consider each item</td><td>Lambda</td></tr><tr><td>regex</td><td>Optionally one or more regex can be provided for convenience</td><td>list of string</td></tr></tbody></table><h3 id=description>Description</h3><p>Returns TRUE if all items are true.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/any/index.html b/vql_reference/misc/any/index.html
index d8f6b151f02..308d895290e 100644
--- a/vql_reference/misc/any/index.html
+++ b/vql_reference/misc/any/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>any :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/any/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/any/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>any</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#any>any</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=any>any</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>items</td><td>The items to consider. Can be an array, subquery or stored query. Will only be lazily evaluated!</td><td>Any (required)</td></tr><tr><td>filter</td><td>A callback to consider each item</td><td>Lambda</td></tr><tr><td>regex</td><td>Optionally one or more regex can be provided for convenience</td><td>list of string</td></tr></tbody></table><h3 id=description>Description</h3><p>Returns TRUE if any items are true.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>any</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#any>any</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=any>any</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>items</td><td>The items to consider. Can be an array, subquery or stored query. Will only be lazily evaluated!</td><td>Any (required)</td></tr><tr><td>filter</td><td>A callback to consider each item</td><td>Lambda</td></tr><tr><td>regex</td><td>Optionally one or more regex can be provided for convenience</td><td>list of string</td></tr></tbody></table><h3 id=description>Description</h3><p>Returns TRUE if any items are true.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/base85decode/index.html b/vql_reference/misc/base85decode/index.html
index 6d84a1e8fc0..cf6831769b6 100644
--- a/vql_reference/misc/base85decode/index.html
+++ b/vql_reference/misc/base85decode/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>base85decode :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/base85decode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/base85decode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>base85decode</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#base85decode>base85decode</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=base85decode>base85decode</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>A string to decode</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Decode a base85 encoded string.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>base85decode</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#base85decode>base85decode</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=base85decode>base85decode</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>A string to decode</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Decode a base85 encoded string.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/client_create/index.html b/vql_reference/misc/client_create/index.html
index debfe5c6f03..89184dbe920 100644
--- a/vql_reference/misc/client_create/index.html
+++ b/vql_reference/misc/client_create/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>client_create :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/client_create/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/client_create/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>client_create</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#client_create>client_create</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=client_create>client_create</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>first_seen_at</td><td></td><td>time.Time</td></tr><tr><td>last_seen_at</td><td></td><td>time.Time</td></tr><tr><td>labels</td><td></td><td>list of string</td></tr><tr><td>os</td><td>What type of OS this is (default offline)</td><td>string</td></tr><tr><td>hostname</td><td>The hostname of the system</td><td>string</td></tr><tr><td>client_id</td><td>if set we use this client id otherwise we make a new one</td><td>string</td></tr><tr><td>mac_addresses</td><td></td><td>list of string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">SERVER_ADMIN</i></p><h3 id=description>Description</h3><p>Create a new client in the data store.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">SERVER_ADMIN</i></p><h3 id=description>Description</h3><p>Create a new client in the data store.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/create_notebook_download/index.html b/vql_reference/misc/create_notebook_download/index.html
index bca28361407..c4f76519197 100644
--- a/vql_reference/misc/create_notebook_download/index.html
+++ b/vql_reference/misc/create_notebook_download/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>create_notebook_download :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/create_notebook_download/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/create_notebook_download/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>create_notebook_download</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#create_notebook_download>create_notebook_download</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=create_notebook_download>create_notebook_download</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>notebook_id</td><td>Notebook ID to export.</td><td>string (required)</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">PREPARE_RESULTS</i></p><h3 id=description>Description</h3><p>Creates a notebook export zip file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">PREPARE_RESULTS</i></p><h3 id=description>Description</h3><p>Creates a notebook export zip file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/delay/index.html b/vql_reference/misc/delay/index.html
index e95546e53fb..4fea4d0b675 100644
--- a/vql_reference/misc/delay/index.html
+++ b/vql_reference/misc/delay/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>delay :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/delay/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/delay/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>delay</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#delay>delay</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=delay>delay</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>query</td><td>Source for rows.</td><td>StoredQuery (required)</td></tr><tr><td>delay</td><td>Number of seconds to delay.</td><td>int64 (required)</td></tr><tr><td>buffer_size</td><td>Maximum number of rows to buffer (default 1000).</td><td>int64</td></tr></tbody></table><h3 id=description>Description</h3><p>Executes &lsquo;query&rsquo; and delays relaying the rows by the specified number of seconds.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>delay</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#delay>delay</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=delay>delay</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>query</td><td>Source for rows.</td><td>StoredQuery (required)</td></tr><tr><td>delay</td><td>Number of seconds to delay.</td><td>int64 (required)</td></tr><tr><td>buffer_size</td><td>Maximum number of rows to buffer (default 1000).</td><td>int64</td></tr></tbody></table><h3 id=description>Description</h3><p>Executes &lsquo;query&rsquo; and delays relaying the rows by the specified number of seconds.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/delete_events/index.html b/vql_reference/misc/delete_events/index.html
index 5eee48d67c8..26df8159eeb 100644
--- a/vql_reference/misc/delete_events/index.html
+++ b/vql_reference/misc/delete_events/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>delete_events :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/delete_events/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/delete_events/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>delete_events</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#delete_events>delete_events</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=delete_events>delete_events</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>artifact</td><td>Name of artifact events to remove</td><td>string (required)</td></tr><tr><td>client_id</td><td>Client ID of events to remove (use &lsquo;server&rsquo; for server events)</td><td>string (required)</td></tr><tr><td>start_time</td><td>Start time to be deleted</td><td>time.Time</td></tr><tr><td>end_time</td><td>End time to be deleted</td><td>time.Time</td></tr><tr><td>really_do_it</td><td>If not specified, just show what files will be removed</td><td>bool</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">DELETE_RESULTS</i></p><h3 id=description>Description</h3><p>Delete all the files that make up a flow.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">DELETE_RESULTS</i></p><h3 id=description>Description</h3><p>Delete all the files that make up a flow.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/delete_flow/index.html b/vql_reference/misc/delete_flow/index.html
index 3854ee9c8dc..1af3bbca2b6 100644
--- a/vql_reference/misc/delete_flow/index.html
+++ b/vql_reference/misc/delete_flow/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>delete_flow :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/delete_flow/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/delete_flow/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>delete_flow</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#delete_flow>delete_flow</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=delete_flow>delete_flow</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>flow_id</td><td></td><td>string (required)</td></tr><tr><td>client_id</td><td></td><td>string (required)</td></tr><tr><td>really_do_it</td><td></td><td>bool</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">DELETE_RESULTS</i></p><h3 id=description>Description</h3><p>Delete all the files that make up a flow.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">DELETE_RESULTS</i></p><h3 id=description>Description</h3><p>Delete all the files that make up a flow.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/efivariables/index.html b/vql_reference/misc/efivariables/index.html
index 95cae330999..a1a2f0f3c48 100644
--- a/vql_reference/misc/efivariables/index.html
+++ b/vql_reference/misc/efivariables/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>efivariables :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/efivariables/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/efivariables/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>efivariables</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#efivariables>efivariables</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=efivariables>efivariables</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>namespace</td><td>Variable namespace.</td><td>string</td></tr><tr><td>name</td><td>Variable name</td><td>string</td></tr><tr><td>value</td><td>Read variable value</td><td>bool</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Enumerate efi variables.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Enumerate efi variables.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/entropy/index.html b/vql_reference/misc/entropy/index.html
index 8d181096ebf..f1aecd49ffd 100644
--- a/vql_reference/misc/entropy/index.html
+++ b/vql_reference/misc/entropy/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>entropy :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/entropy/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/entropy/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>entropy</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#entropy>entropy</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=entropy>entropy</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td></td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Calculates shannon scale entropy of a string.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>entropy</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#entropy>entropy</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=entropy>entropy</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td></td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Calculates shannon scale entropy of a string.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/flow_logs/index.html b/vql_reference/misc/flow_logs/index.html
index 63a056edc08..77723f41c1a 100644
--- a/vql_reference/misc/flow_logs/index.html
+++ b/vql_reference/misc/flow_logs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>flow_logs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/flow_logs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/flow_logs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>flow_logs</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#flow_logs>flow_logs</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=flow_logs>flow_logs</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>flow_id</td><td>The flow id to read.</td><td>string (required)</td></tr><tr><td>client_id</td><td>The client id to extract</td><td>string (required)</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Retrieve the query logs of a flow.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Retrieve the query logs of a flow.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/get_flow/index.html b/vql_reference/misc/get_flow/index.html
index 7f4bbbcf2cf..5b78cab4114 100644
--- a/vql_reference/misc/get_flow/index.html
+++ b/vql_reference/misc/get_flow/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>get_flow :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/get_flow/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/get_flow/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>get_flow</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#get_flow>get_flow</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=get_flow>get_flow</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>client_id</td><td></td><td>string (required)</td></tr><tr><td>flow_id</td><td></td><td>string</td></tr></tbody></table><p>Required Permissions:
 <i class="linkcolour label pull-right label-success">COLLECT_CLIENT</i>
-<i class="linkcolour label pull-right label-success">COLLECT_SERVER</i></p><h3 id=description>Description</h3><p>Gets flow details.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">COLLECT_SERVER</i></p><h3 id=description>Description</h3><p>Gets flow details.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/gunzip/index.html b/vql_reference/misc/gunzip/index.html
index 68974f2d8c4..4c7173e5ecd 100644
--- a/vql_reference/misc/gunzip/index.html
+++ b/vql_reference/misc/gunzip/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>gunzip :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/gunzip/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/gunzip/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>gunzip</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#gunzip>gunzip</a><ul><li><a href=#description>Description</a></li><li><a href=#example>Example</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=gunzip>gunzip</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>Data to apply Gunzip</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Uncompress a gzip-compressed block of data.</p><h3 id=example>Example</h3><pre><code class=language-vql>gunzip(string=base64decode(string=&quot;H4sIAAAAAAACA3N0pC4AAKAb0QxQAAAA&quot;)) -&gt; &quot;AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA&quot;
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/hunt_delete/index.html b/vql_reference/misc/hunt_delete/index.html
index 6707c44899f..6e380c77f53 100644
--- a/vql_reference/misc/hunt_delete/index.html
+++ b/vql_reference/misc/hunt_delete/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>hunt_delete :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/hunt_delete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/hunt_delete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>hunt_delete</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#hunt_delete>hunt_delete</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=hunt_delete>hunt_delete</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>hunt_id</td><td></td><td>string (required)</td></tr><tr><td>really_do_it</td><td></td><td>bool</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">SERVER_ADMIN</i></p><h3 id=description>Description</h3><p>Delete a hunt.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">SERVER_ADMIN</i></p><h3 id=description>Description</h3><p>Delete a hunt.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/hunt_update/index.html b/vql_reference/misc/hunt_update/index.html
index 5a2e21e9dae..7907b6aaf14 100644
--- a/vql_reference/misc/hunt_update/index.html
+++ b/vql_reference/misc/hunt_update/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>hunt_update :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/hunt_update/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/hunt_update/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>hunt_update</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#hunt_update>hunt_update</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=hunt_update>hunt_update</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>hunt_id</td><td>The hunt to update</td><td>string (required)</td></tr><tr><td>stop</td><td>Stop the hunt</td><td>bool</td></tr><tr><td>start</td><td>Start the hunt</td><td>bool</td></tr><tr><td>description</td><td>Update hunt description</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">START_HUNT</i></p><h3 id=description>Description</h3><p>Update a hunt.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">START_HUNT</i></p><h3 id=description>Description</h3><p>Update a hunt.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/index.html b/vql_reference/misc/index.html
index c4cedd68d1d..8406b832c35 100644
--- a/vql_reference/misc/index.html
+++ b/vql_reference/misc/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Misc :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>Misc</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Misc</h1><p>Miscellaneous plugins not yet categorized.</p><table><thead><tr><th>Plugin/Function</th><th><span class=vql_type>Type</span></th><th>Description</th></tr></thead><tbody><tr><td><a href=alert>alert</a></td><td><span class=vql_type>Function</span></td><td>Generate an alert message</td></tr><tr><td><a href=all>all</a></td><td><span class=vql_type>Function</span></td><td>Returns TRUE if all items are true</td></tr><tr><td><a href=any>any</a></td><td><span class=vql_type>Function</span></td><td>Returns TRUE if any items are true</td></tr><tr><td><a href=base85decode>base85decode</a></td><td><span class=vql_type>Function</span></td><td>Decode a base85 encoded string</td></tr><tr><td><a href=client_create>client_create</a></td><td><span class=vql_type>Function</span></td><td>Create a new client in the data store</td></tr><tr><td><a href=create_notebook_download>create_notebook_download</a></td><td><span class=vql_type>Function</span></td><td>Creates a notebook export zip file</td></tr><tr><td><a href=delay>delay</a></td><td><span class=vql_type>Plugin</span></td><td>Executes &lsquo;query&rsquo; and delays relaying the rows by the specified number of seconds</td></tr><tr><td><a href=delete_events>delete_events</a></td><td><span class=vql_type>Plugin</span></td><td>Delete all the files that make up a flow</td></tr><tr><td><a href=delete_flow>delete_flow</a></td><td><span class=vql_type>Plugin</span></td><td>Delete all the files that make up a flow</td></tr><tr><td><a href=efivariables>efivariables</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerate efi variables</td></tr><tr><td><a href=entropy>entropy</a></td><td><span class=vql_type>Function</span></td><td>Calculates shannon scale entropy of a string</td></tr><tr><td><a href=flow_logs>flow_logs</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the query logs of a flow</td></tr><tr><td><a href=get_flow>get_flow</a></td><td><span class=vql_type>Function</span></td><td>Gets flow details</td></tr><tr><td><a href=gunzip>gunzip</a></td><td><span class=vql_type>Function</span></td><td>Uncompress a gzip-compressed block of data</td></tr><tr><td><a href=hunt_delete>hunt_delete</a></td><td><span class=vql_type>Plugin</span></td><td>Delete a hunt</td></tr><tr><td><a href=hunt_update>hunt_update</a></td><td><span class=vql_type>Function</span></td><td>Update a hunt</td></tr><tr><td><a href=leveldb>leveldb</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerate all items in a level db database</td></tr><tr><td><a href=logging>logging</a></td><td><span class=vql_type>Plugin</span></td><td>Watch the logs emitted by the server</td></tr><tr><td><a href=logscale_upload>logscale_upload</a></td><td><span class=vql_type>Plugin</span></td><td>Upload rows to LogScale ingestion server</td></tr><tr><td><a href=lru>lru</a></td><td><span class=vql_type>Function</span></td><td>Creates an LRU object</td></tr><tr><td><a href=lzxpress_decompress>lzxpress_decompress</a></td><td><span class=vql_type>Function</span></td><td>Decompress an lzxpress blob</td></tr><tr><td><a href=mail>mail</a></td><td><span class=vql_type>Function</span></td><td>Send Email to a remote server</td></tr><tr><td><a href=mock_clear>mock_clear</a></td><td><span class=vql_type>Function</span></td><td>Resets all mocks</td></tr><tr><td><a href=mock_replay>mock_replay</a></td><td><span class=vql_type>Function</span></td><td>Replay recorded calls on a mock</td></tr><tr><td><a href=monitoring_logs>monitoring_logs</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve log messages from client event monitoring for the specified client id and artifact</td></tr><tr><td><a href=org>org</a></td><td><span class=vql_type>Function</span></td><td>Return the details of the current org</td></tr><tr><td><a href=org_create>org_create</a></td><td><span class=vql_type>Function</span></td><td>Creates a new organization</td></tr><tr><td><a href=org_delete>org_delete</a></td><td><span class=vql_type>Function</span></td><td>Deletes an Org from the server</td></tr><tr><td><a href=orgs>orgs</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the list of orgs on this server</td></tr><tr><td><a href=passwd>passwd</a></td><td><span class=vql_type>Function</span></td><td>Updates the user&rsquo;s password</td></tr><tr><td><a href=pe_dump>pe_dump</a></td><td><span class=vql_type>Function</span></td><td>Dump a PE file from process memory</td></tr><tr><td><a href=pk_decrypt>pk_decrypt</a></td><td><span class=vql_type>Function</span></td><td>Decrypt files using pubkey encryption</td></tr><tr><td><a href=pk_encrypt>pk_encrypt</a></td><td><span class=vql_type>Function</span></td><td>Encrypt files using pubkey encryption</td></tr><tr><td><a href=process_tracker>process_tracker</a></td><td><span class=vql_type>Function</span></td><td>Install a global process tracker</td></tr><tr><td><a href=process_tracker_all>process_tracker_all</a></td><td><span class=vql_type>Function</span></td><td>Get all processes stored in the tracker</td></tr><tr><td><a href=process_tracker_callchain>process_tracker_callchain</a></td><td><span class=vql_type>Function</span></td><td>Get a call chain from the global process tracker</td></tr><tr><td><a href=process_tracker_children>process_tracker_children</a></td><td><span class=vql_type>Function</span></td><td>Get all children of a process</td></tr><tr><td><a href=process_tracker_get>process_tracker_get</a></td><td><span class=vql_type>Function</span></td><td>Get a single process from the global tracker</td></tr><tr><td><a href=process_tracker_pslist>process_tracker_pslist</a></td><td><span class=vql_type>Plugin</span></td><td>List all processes from the process tracker</td></tr><tr><td><a href=process_tracker_tree>process_tracker_tree</a></td><td><span class=vql_type>Function</span></td><td>Get the full process tree under the process id</td></tr><tr><td><a href=process_tracker_updates>process_tracker_updates</a></td><td><span class=vql_type>Plugin</span></td><td>Get the process tracker update events from the global process tracker</td></tr><tr><td><a href=profile_goroutines>profile_goroutines</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerates all running goroutines</td></tr><tr><td><a href=profile_memory>profile_memory</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerates all in use memory within the runtime</td></tr><tr><td><a href=pskill>pskill</a></td><td><span class=vql_type>Function</span></td><td>Kill the specified process</td></tr><tr><td><a href=query>query</a></td><td><span class=vql_type>Plugin</span></td><td>Evaluate a VQL query</td></tr><tr><td><a href=read_crypto_file>read_crypto_file</a></td><td><span class=vql_type>Plugin</span></td><td>Read a previously stored encrypted local storage file</td></tr><tr><td><a href=rekey>rekey</a></td><td><span class=vql_type>Function</span></td><td>Causes the client to rekey and regenerate a new client ID</td></tr><tr><td><a href=remap>remap</a></td><td><span class=vql_type>Function</span></td><td>Apply a remapping configuration to the root scope</td></tr><tr><td><a href=repack>repack</a></td><td><span class=vql_type>Function</span></td><td>Repack and upload a repacked binary or MSI to the server</td></tr><tr><td><a href=server_frontend_cert>server_frontend_cert</a></td><td><span class=vql_type>Function</span></td><td>Get Server Frontend Certificate</td></tr><tr><td><a href=sigma>sigma</a></td><td><span class=vql_type>Plugin</span></td><td>Evaluate sigma rules</td></tr><tr><td><a href=sigma_log_sources>sigma_log_sources</a></td><td><span class=vql_type>Function</span></td><td>Constructs a Log sources object to be used in sigma rules</td></tr><tr><td><a href=sysinfo>sysinfo</a></td><td><span class=vql_type>Function</span></td><td>Collect system information on Linux clients</td></tr><tr><td><a href=tlsh_hash>tlsh_hash</a></td><td><span class=vql_type>Function</span></td><td>Calculate the tlsh hash of a file</td></tr><tr><td><a href=trace>trace</a></td><td><span class=vql_type>Function</span></td><td>Upload a trace file</td></tr><tr><td><a href=upload_azure>upload_azure</a></td><td><span class=vql_type>Function</span></td><td>Upload files to Azure Blob Storage Service</td></tr><tr><td><a href=upload_smb>upload_smb</a></td><td><span class=vql_type>Function</span></td><td>Upload files using the SMB file share protocol</td></tr><tr><td><a href=user>user</a></td><td><span class=vql_type>Function</span></td><td>Retrieves information about the Velociraptor user</td></tr><tr><td><a href=user_grant>user_grant</a></td><td><span class=vql_type>Function</span></td><td>Grants the user the specified roles</td></tr><tr><td><a href=vfs_ls>vfs_ls</a></td><td><span class=vql_type>Plugin</span></td><td>List directory and build a VFS object</td></tr><tr><td><a href=write_crypto_file>write_crypto_file</a></td><td><span class=vql_type>Plugin</span></td><td>Write a query into an encrypted local storage file</td></tr><tr><td><a href=write_jsonl>write_jsonl</a></td><td><span class=vql_type>Plugin</span></td><td>Write a query into a JSONL file</td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>Misc</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Misc</h1><p>Miscellaneous plugins not yet categorized.</p><table><thead><tr><th>Plugin/Function</th><th><span class=vql_type>Type</span></th><th>Description</th></tr></thead><tbody><tr><td><a href=alert>alert</a></td><td><span class=vql_type>Function</span></td><td>Generate an alert message</td></tr><tr><td><a href=all>all</a></td><td><span class=vql_type>Function</span></td><td>Returns TRUE if all items are true</td></tr><tr><td><a href=any>any</a></td><td><span class=vql_type>Function</span></td><td>Returns TRUE if any items are true</td></tr><tr><td><a href=base85decode>base85decode</a></td><td><span class=vql_type>Function</span></td><td>Decode a base85 encoded string</td></tr><tr><td><a href=client_create>client_create</a></td><td><span class=vql_type>Function</span></td><td>Create a new client in the data store</td></tr><tr><td><a href=create_notebook_download>create_notebook_download</a></td><td><span class=vql_type>Function</span></td><td>Creates a notebook export zip file</td></tr><tr><td><a href=delay>delay</a></td><td><span class=vql_type>Plugin</span></td><td>Executes &lsquo;query&rsquo; and delays relaying the rows by the specified number of seconds</td></tr><tr><td><a href=delete_events>delete_events</a></td><td><span class=vql_type>Plugin</span></td><td>Delete all the files that make up a flow</td></tr><tr><td><a href=delete_flow>delete_flow</a></td><td><span class=vql_type>Plugin</span></td><td>Delete all the files that make up a flow</td></tr><tr><td><a href=efivariables>efivariables</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerate efi variables</td></tr><tr><td><a href=entropy>entropy</a></td><td><span class=vql_type>Function</span></td><td>Calculates shannon scale entropy of a string</td></tr><tr><td><a href=flow_logs>flow_logs</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the query logs of a flow</td></tr><tr><td><a href=get_flow>get_flow</a></td><td><span class=vql_type>Function</span></td><td>Gets flow details</td></tr><tr><td><a href=gunzip>gunzip</a></td><td><span class=vql_type>Function</span></td><td>Uncompress a gzip-compressed block of data</td></tr><tr><td><a href=hunt_delete>hunt_delete</a></td><td><span class=vql_type>Plugin</span></td><td>Delete a hunt</td></tr><tr><td><a href=hunt_update>hunt_update</a></td><td><span class=vql_type>Function</span></td><td>Update a hunt</td></tr><tr><td><a href=leveldb>leveldb</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerate all items in a level db database</td></tr><tr><td><a href=logging>logging</a></td><td><span class=vql_type>Plugin</span></td><td>Watch the logs emitted by the server</td></tr><tr><td><a href=logscale_upload>logscale_upload</a></td><td><span class=vql_type>Plugin</span></td><td>Upload rows to LogScale ingestion server</td></tr><tr><td><a href=lru>lru</a></td><td><span class=vql_type>Function</span></td><td>Creates an LRU object</td></tr><tr><td><a href=lzxpress_decompress>lzxpress_decompress</a></td><td><span class=vql_type>Function</span></td><td>Decompress an lzxpress blob</td></tr><tr><td><a href=mail>mail</a></td><td><span class=vql_type>Function</span></td><td>Send Email to a remote server</td></tr><tr><td><a href=mock_clear>mock_clear</a></td><td><span class=vql_type>Function</span></td><td>Resets all mocks</td></tr><tr><td><a href=mock_replay>mock_replay</a></td><td><span class=vql_type>Function</span></td><td>Replay recorded calls on a mock</td></tr><tr><td><a href=monitoring_logs>monitoring_logs</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve log messages from client event monitoring for the specified client id and artifact</td></tr><tr><td><a href=org>org</a></td><td><span class=vql_type>Function</span></td><td>Return the details of the current org</td></tr><tr><td><a href=org_create>org_create</a></td><td><span class=vql_type>Function</span></td><td>Creates a new organization</td></tr><tr><td><a href=org_delete>org_delete</a></td><td><span class=vql_type>Function</span></td><td>Deletes an Org from the server</td></tr><tr><td><a href=orgs>orgs</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the list of orgs on this server</td></tr><tr><td><a href=passwd>passwd</a></td><td><span class=vql_type>Function</span></td><td>Updates the user&rsquo;s password</td></tr><tr><td><a href=pe_dump>pe_dump</a></td><td><span class=vql_type>Function</span></td><td>Dump a PE file from process memory</td></tr><tr><td><a href=pk_decrypt>pk_decrypt</a></td><td><span class=vql_type>Function</span></td><td>Decrypt files using pubkey encryption</td></tr><tr><td><a href=pk_encrypt>pk_encrypt</a></td><td><span class=vql_type>Function</span></td><td>Encrypt files using pubkey encryption</td></tr><tr><td><a href=process_tracker>process_tracker</a></td><td><span class=vql_type>Function</span></td><td>Install a global process tracker</td></tr><tr><td><a href=process_tracker_all>process_tracker_all</a></td><td><span class=vql_type>Function</span></td><td>Get all processes stored in the tracker</td></tr><tr><td><a href=process_tracker_callchain>process_tracker_callchain</a></td><td><span class=vql_type>Function</span></td><td>Get a call chain from the global process tracker</td></tr><tr><td><a href=process_tracker_children>process_tracker_children</a></td><td><span class=vql_type>Function</span></td><td>Get all children of a process</td></tr><tr><td><a href=process_tracker_get>process_tracker_get</a></td><td><span class=vql_type>Function</span></td><td>Get a single process from the global tracker</td></tr><tr><td><a href=process_tracker_pslist>process_tracker_pslist</a></td><td><span class=vql_type>Plugin</span></td><td>List all processes from the process tracker</td></tr><tr><td><a href=process_tracker_tree>process_tracker_tree</a></td><td><span class=vql_type>Function</span></td><td>Get the full process tree under the process id</td></tr><tr><td><a href=process_tracker_updates>process_tracker_updates</a></td><td><span class=vql_type>Plugin</span></td><td>Get the process tracker update events from the global process tracker</td></tr><tr><td><a href=profile_goroutines>profile_goroutines</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerates all running goroutines</td></tr><tr><td><a href=profile_memory>profile_memory</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerates all in use memory within the runtime</td></tr><tr><td><a href=pskill>pskill</a></td><td><span class=vql_type>Function</span></td><td>Kill the specified process</td></tr><tr><td><a href=query>query</a></td><td><span class=vql_type>Plugin</span></td><td>Evaluate a VQL query</td></tr><tr><td><a href=read_crypto_file>read_crypto_file</a></td><td><span class=vql_type>Plugin</span></td><td>Read a previously stored encrypted local storage file</td></tr><tr><td><a href=rekey>rekey</a></td><td><span class=vql_type>Function</span></td><td>Causes the client to rekey and regenerate a new client ID</td></tr><tr><td><a href=remap>remap</a></td><td><span class=vql_type>Function</span></td><td>Apply a remapping configuration to the root scope</td></tr><tr><td><a href=repack>repack</a></td><td><span class=vql_type>Function</span></td><td>Repack and upload a repacked binary or MSI to the server</td></tr><tr><td><a href=server_frontend_cert>server_frontend_cert</a></td><td><span class=vql_type>Function</span></td><td>Get Server Frontend Certificate</td></tr><tr><td><a href=sigma>sigma</a></td><td><span class=vql_type>Plugin</span></td><td>Evaluate sigma rules</td></tr><tr><td><a href=sigma_log_sources>sigma_log_sources</a></td><td><span class=vql_type>Function</span></td><td>Constructs a Log sources object to be used in sigma rules</td></tr><tr><td><a href=sysinfo>sysinfo</a></td><td><span class=vql_type>Function</span></td><td>Collect system information on Linux clients</td></tr><tr><td><a href=tlsh_hash>tlsh_hash</a></td><td><span class=vql_type>Function</span></td><td>Calculate the tlsh hash of a file</td></tr><tr><td><a href=trace>trace</a></td><td><span class=vql_type>Function</span></td><td>Upload a trace file</td></tr><tr><td><a href=upload_azure>upload_azure</a></td><td><span class=vql_type>Function</span></td><td>Upload files to Azure Blob Storage Service</td></tr><tr><td><a href=upload_smb>upload_smb</a></td><td><span class=vql_type>Function</span></td><td>Upload files using the SMB file share protocol</td></tr><tr><td><a href=user>user</a></td><td><span class=vql_type>Function</span></td><td>Retrieves information about the Velociraptor user</td></tr><tr><td><a href=user_grant>user_grant</a></td><td><span class=vql_type>Function</span></td><td>Grants the user the specified roles</td></tr><tr><td><a href=vfs_ls>vfs_ls</a></td><td><span class=vql_type>Plugin</span></td><td>List directory and build a VFS object</td></tr><tr><td><a href=write_crypto_file>write_crypto_file</a></td><td><span class=vql_type>Plugin</span></td><td>Write a query into an encrypted local storage file</td></tr><tr><td><a href=write_jsonl>write_jsonl</a></td><td><span class=vql_type>Plugin</span></td><td>Write a query into a JSONL file</td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/leveldb/index.html b/vql_reference/misc/leveldb/index.html
index 5beb7e1a0b0..0a30f798d10 100644
--- a/vql_reference/misc/leveldb/index.html
+++ b/vql_reference/misc/leveldb/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>leveldb :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/leveldb/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/leveldb/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>leveldb</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#leveldb>leveldb</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=leveldb>leveldb</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>file</td><td>The path to the leveldb file.</td><td>OSPath</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Enumerate all items in a level db database</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Enumerate all items in a level db database</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/logging/index.html b/vql_reference/misc/logging/index.html
index 9b2cdfb3073..3ed0c1586dd 100644
--- a/vql_reference/misc/logging/index.html
+++ b/vql_reference/misc/logging/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>logging :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/logging/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/logging/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>logging</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#logging>logging</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=logging>logging</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>component</td><td></td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Watch the logs emitted by the server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Watch the logs emitted by the server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/logscale_upload/index.html b/vql_reference/misc/logscale_upload/index.html
index e08b8fda158..a667ef88772 100644
--- a/vql_reference/misc/logscale_upload/index.html
+++ b/vql_reference/misc/logscale_upload/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>logscale_upload :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/logscale_upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/logscale_upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>logscale_upload</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#logscale_upload>logscale_upload</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=logscale_upload>logscale_upload</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>query</td><td>Source for rows to upload.</td><td>StoredQuery (required)</td></tr><tr><td>apibaseurl</td><td>Base URL for Ingestion API</td><td>string (required)</td></tr><tr><td>ingest_token</td><td>Ingest token for API</td><td>string (required)</td></tr><tr><td>threads</td><td>How many threads to use to post batched events.</td><td>int</td></tr><tr><td>http_timeout</td><td>Timeout for http requests (default: 10s)</td><td>int</td></tr><tr><td>max_retries</td><td>Maximum number of retries before failing an operation. A value &lt; 0 means retry forever. (default: 7200)</td><td>int</td></tr><tr><td>root_ca</td><td>As a better alternative to skip_verify, allows root ca certs to be added here.</td><td>string</td></tr><tr><td>skip_verify</td><td>Skip verification of server certificates (default: false)</td><td>bool</td></tr><tr><td>batching_timeout_ms</td><td>Timeout between posts (default: 3000ms)</td><td>int</td></tr><tr><td>event_batch_size</td><td>Items to batch before post (default: 2000)</td><td>int</td></tr><tr><td>tag_fields</td><td>Name of fields to be used as tags. Fields can be renamed using =<newname></td><td>list of string</td></tr><tr><td>stats_interval</td><td>Interval, in seconds, to post statistics to the log (default: 600, 0 to disable)</td><td>int</td></tr><tr><td>debug</td><td>Enable verbose logging.</td><td>bool</td></tr></tbody></table><h3 id=description>Description</h3><p>Upload rows to LogScale ingestion server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>logscale_upload</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#logscale_upload>logscale_upload</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=logscale_upload>logscale_upload</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>query</td><td>Source for rows to upload.</td><td>StoredQuery (required)</td></tr><tr><td>apibaseurl</td><td>Base URL for Ingestion API</td><td>string (required)</td></tr><tr><td>ingest_token</td><td>Ingest token for API</td><td>string (required)</td></tr><tr><td>threads</td><td>How many threads to use to post batched events.</td><td>int</td></tr><tr><td>http_timeout</td><td>Timeout for http requests (default: 10s)</td><td>int</td></tr><tr><td>max_retries</td><td>Maximum number of retries before failing an operation. A value &lt; 0 means retry forever. (default: 7200)</td><td>int</td></tr><tr><td>root_ca</td><td>As a better alternative to skip_verify, allows root ca certs to be added here.</td><td>string</td></tr><tr><td>skip_verify</td><td>Skip verification of server certificates (default: false)</td><td>bool</td></tr><tr><td>batching_timeout_ms</td><td>Timeout between posts (default: 3000ms)</td><td>int</td></tr><tr><td>event_batch_size</td><td>Items to batch before post (default: 2000)</td><td>int</td></tr><tr><td>tag_fields</td><td>Name of fields to be used as tags. Fields can be renamed using =<newname></td><td>list of string</td></tr><tr><td>stats_interval</td><td>Interval, in seconds, to post statistics to the log (default: 600, 0 to disable)</td><td>int</td></tr><tr><td>debug</td><td>Enable verbose logging.</td><td>bool</td></tr></tbody></table><h3 id=description>Description</h3><p>Upload rows to LogScale ingestion server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/lru/index.html b/vql_reference/misc/lru/index.html
index ae3310507df..71e1ea4f8df 100644
--- a/vql_reference/misc/lru/index.html
+++ b/vql_reference/misc/lru/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>lru :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/lru/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/lru/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -83,4 +83,4 @@
             value=EventData.RelativeName),
    else=TRUE)
 </code></pre><p>Note how <code>set()</code> can be used to add items to the cache and <code>get()</code>
-is used to retrieve items.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+is used to retrieve items.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/lzxpress_decompress/index.html b/vql_reference/misc/lzxpress_decompress/index.html
index 255e56c006e..0965f8a545d 100644
--- a/vql_reference/misc/lzxpress_decompress/index.html
+++ b/vql_reference/misc/lzxpress_decompress/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>lzxpress_decompress :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/lzxpress_decompress/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/lzxpress_decompress/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>lzxpress_decompress</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#lzxpress_decompress>lzxpress_decompress</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=lzxpress_decompress>lzxpress_decompress</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>data</td><td>The lzxpress stream (bytes)</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Decompress an lzxpress blob.</p><p>This function is most useful when decoding prefetch files.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>lzxpress_decompress</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#lzxpress_decompress>lzxpress_decompress</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=lzxpress_decompress>lzxpress_decompress</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>data</td><td>The lzxpress stream (bytes)</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Decompress an lzxpress blob.</p><p>This function is most useful when decoding prefetch files.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/mail/index.html b/vql_reference/misc/mail/index.html
index 9b7dd61f52f..6c4492db4e2 100644
--- a/vql_reference/misc/mail/index.html
+++ b/vql_reference/misc/mail/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>mail :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/mail/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/mail/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>mail</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#mail>mail</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=mail>mail</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>to</td><td>Recipient of the mail</td><td>list of string (required)</td></tr><tr><td>from</td><td>The from email address.</td><td>string</td></tr><tr><td>cc</td><td>A cc for the mail</td><td>list of string</td></tr><tr><td>subject</td><td>The subject.</td><td>string</td></tr><tr><td>body</td><td>The body of the mail.</td><td>string (required)</td></tr><tr><td>period</td><td>How long to wait before sending the next mail - help to throttle mails.</td><td>int64</td></tr><tr><td>server_port</td><td>The SMTP server port to use (default 587).</td><td>uint64</td></tr><tr><td>server</td><td>The SMTP server to use (if not specified we try the config file).</td><td>string</td></tr><tr><td>auth_username</td><td>The SMTP username we authenticate to the server.</td><td>string</td></tr><tr><td>auth_password</td><td>The SMTP username password we use to authenticate to the server.</td><td>string</td></tr><tr><td>skip_verify</td><td>Skip SSL verification(default: False).</td><td>bool</td></tr><tr><td>root_ca</td><td>As a better alternative to disable_ssl_security, allows root ca certs to be added here.</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">SERVER_ADMIN</i></p><h3 id=description>Description</h3><p>Send Email to a remote server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">SERVER_ADMIN</i></p><h3 id=description>Description</h3><p>Send Email to a remote server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/mock_clear/index.html b/vql_reference/misc/mock_clear/index.html
index 48411ce0c65..f8bcd4504f9 100644
--- a/vql_reference/misc/mock_clear/index.html
+++ b/vql_reference/misc/mock_clear/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>mock_clear :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/mock_clear/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/mock_clear/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>mock_clear</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#mock_clear>mock_clear</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=mock_clear>mock_clear</h2><p><span class='vql_type pull-right page-header'>Function</span></p><h3 id=description>Description</h3><p>Resets all mocks.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>mock_clear</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#mock_clear>mock_clear</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=mock_clear>mock_clear</h2><p><span class='vql_type pull-right page-header'>Function</span></p><h3 id=description>Description</h3><p>Resets all mocks.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/mock_replay/index.html b/vql_reference/misc/mock_replay/index.html
index 04fa767e4df..ea3f6465038 100644
--- a/vql_reference/misc/mock_replay/index.html
+++ b/vql_reference/misc/mock_replay/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>mock_replay :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/mock_replay/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/mock_replay/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>mock_replay</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#mock_replay>mock_replay</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=mock_replay>mock_replay</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>plugin</td><td>The plugin to mock</td><td>string</td></tr><tr><td>function</td><td>The function to mock</td><td>string</td></tr><tr><td>expected_calls</td><td>How many times plugin should be called</td><td>int</td></tr><tr><td>clear</td><td>This call will clear previous mocks for this plugin</td><td>bool</td></tr></tbody></table><h3 id=description>Description</h3><p>Replay recorded calls on a mock.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>mock_replay</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#mock_replay>mock_replay</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=mock_replay>mock_replay</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>plugin</td><td>The plugin to mock</td><td>string</td></tr><tr><td>function</td><td>The function to mock</td><td>string</td></tr><tr><td>expected_calls</td><td>How many times plugin should be called</td><td>int</td></tr><tr><td>clear</td><td>This call will clear previous mocks for this plugin</td><td>bool</td></tr></tbody></table><h3 id=description>Description</h3><p>Replay recorded calls on a mock.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/monitoring_logs/index.html b/vql_reference/misc/monitoring_logs/index.html
index c3ffbed2c14..38cb0a98cca 100644
--- a/vql_reference/misc/monitoring_logs/index.html
+++ b/vql_reference/misc/monitoring_logs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>monitoring_logs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/monitoring_logs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/monitoring_logs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>monitoring_logs</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#monitoring_logs>monitoring_logs</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=monitoring_logs>monitoring_logs</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>client_id</td><td>The client id to extract</td><td>string (required)</td></tr><tr><td>artifact</td><td>The name of the artifact collection to fetch</td><td>string (required)</td></tr><tr><td>source</td><td>An optional named source within the artifact</td><td>string</td></tr><tr><td>start_time</td><td>Start return events from this date (for event sources)</td><td>Any</td></tr><tr><td>end_time</td><td>Stop end events reach this time (event sources).</td><td>Any</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Retrieve log messages from client event monitoring for the specified client id and artifact</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Retrieve log messages from client event monitoring for the specified client id and artifact</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/org/index.html b/vql_reference/misc/org/index.html
index fb88608ab96..ce62885d0f4 100644
--- a/vql_reference/misc/org/index.html
+++ b/vql_reference/misc/org/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>org :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/org/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/org/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>org</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#org>org</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=org>org</h2><p><span class='vql_type pull-right page-header'>Function</span></p><h3 id=description>Description</h3><p>Return the details of the current org.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>org</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#org>org</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=org>org</h2><p><span class='vql_type pull-right page-header'>Function</span></p><h3 id=description>Description</h3><p>Return the details of the current org.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/org_create/index.html b/vql_reference/misc/org_create/index.html
index 6a5ff428075..b44cf7bea6a 100644
--- a/vql_reference/misc/org_create/index.html
+++ b/vql_reference/misc/org_create/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>org_create :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/org_create/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/org_create/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>org_create</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#org_create>org_create</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=org_create>org_create</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>name</td><td>The name of the org.</td><td>string (required)</td></tr><tr><td>org_id</td><td>An ID for the new org (if not set use a random ID).</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">ORG_ADMIN</i></p><h3 id=description>Description</h3><p>Creates a new organization.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">ORG_ADMIN</i></p><h3 id=description>Description</h3><p>Creates a new organization.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/org_delete/index.html b/vql_reference/misc/org_delete/index.html
index 6e12cd13a42..b520ed7ac97 100644
--- a/vql_reference/misc/org_delete/index.html
+++ b/vql_reference/misc/org_delete/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>org_delete :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/org_delete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/org_delete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>org_delete</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#org_delete>org_delete</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=org_delete>org_delete</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>org</td><td>The org ID to delete.</td><td>string (required)</td></tr><tr><td>really_do_it</td><td>If not specified, just show what org will be removed</td><td>bool</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">ORG_ADMIN</i></p><h3 id=description>Description</h3><p>Deletes an Org from the server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">ORG_ADMIN</i></p><h3 id=description>Description</h3><p>Deletes an Org from the server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/orgs/index.html b/vql_reference/misc/orgs/index.html
index 25fb5bcf16d..9300d2cf9e4 100644
--- a/vql_reference/misc/orgs/index.html
+++ b/vql_reference/misc/orgs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>orgs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/orgs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/orgs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>orgs</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#orgs>orgs</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=orgs>orgs</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>Retrieve the list of orgs on this server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>orgs</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#orgs>orgs</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=orgs>orgs</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>Retrieve the list of orgs on this server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/passwd/index.html b/vql_reference/misc/passwd/index.html
index c9e3da4f9c9..6b6f4461516 100644
--- a/vql_reference/misc/passwd/index.html
+++ b/vql_reference/misc/passwd/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>passwd :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/passwd/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/passwd/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>passwd</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#passwd>passwd</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=passwd>passwd</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>user</td><td>The user to set password for. If not set, changes the current user&rsquo;s password.</td><td>string</td></tr><tr><td>password</td><td>The new password to set.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Updates the user&rsquo;s password.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>passwd</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#passwd>passwd</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=passwd>passwd</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>user</td><td>The user to set password for. If not set, changes the current user&rsquo;s password.</td><td>string</td></tr><tr><td>password</td><td>The new password to set.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Updates the user&rsquo;s password.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/pe_dump/index.html b/vql_reference/misc/pe_dump/index.html
index d59fc272744..419f8f60aad 100644
--- a/vql_reference/misc/pe_dump/index.html
+++ b/vql_reference/misc/pe_dump/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>pe_dump :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/pe_dump/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/pe_dump/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>pe_dump</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#pe_dump>pe_dump</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=pe_dump>pe_dump</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>pid</td><td>The pid to dump.</td><td>uint64 (required)</td></tr><tr><td>base_offset</td><td>The offset in the file for the base address.</td><td>int64 (required)</td></tr><tr><td>in_memory</td><td>By default we store to a tempfile and return the path. If this option is larger than 0, we prepare the file in a memory buffer at the specified limit, to avoid AV alerts on disk access.</td><td>uint64</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Dump a PE file from process memory.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Dump a PE file from process memory.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/pk_decrypt/index.html b/vql_reference/misc/pk_decrypt/index.html
index d688c218d3c..08232b687cd 100644
--- a/vql_reference/misc/pk_decrypt/index.html
+++ b/vql_reference/misc/pk_decrypt/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>pk_decrypt :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/pk_decrypt/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/pk_decrypt/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>pk_decrypt</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#pk_decrypt>pk_decrypt</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=pk_decrypt>pk_decrypt</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>data</td><td>The data to decrypt</td><td>string (required)</td></tr><tr><td>signing_key</td><td>Public key to verify signature</td><td>string</td></tr><tr><td>private_key</td><td>Private key to decrypt with. Defaults to server private key</td><td>string</td></tr><tr><td>scheme</td><td>Encryption scheme to use. Defaults to RSA. Currently supported: PGP,RSA</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Decrypt files using pubkey encryption</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>pk_decrypt</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#pk_decrypt>pk_decrypt</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=pk_decrypt>pk_decrypt</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>data</td><td>The data to decrypt</td><td>string (required)</td></tr><tr><td>signing_key</td><td>Public key to verify signature</td><td>string</td></tr><tr><td>private_key</td><td>Private key to decrypt with. Defaults to server private key</td><td>string</td></tr><tr><td>scheme</td><td>Encryption scheme to use. Defaults to RSA. Currently supported: PGP,RSA</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Decrypt files using pubkey encryption</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/pk_encrypt/index.html b/vql_reference/misc/pk_encrypt/index.html
index 7fd3f178aba..d1936cc6365 100644
--- a/vql_reference/misc/pk_encrypt/index.html
+++ b/vql_reference/misc/pk_encrypt/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>pk_encrypt :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/pk_encrypt/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/pk_encrypt/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>pk_encrypt</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#pk_encrypt>pk_encrypt</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=pk_encrypt>pk_encrypt</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>data</td><td>The data to encrypt</td><td>string (required)</td></tr><tr><td>signing_key</td><td>Private key to sign with</td><td>string</td></tr><tr><td>public_key</td><td>Public key to encrypt with. Defaults to server public key</td><td>string</td></tr><tr><td>scheme</td><td>Encryption scheme to use. Defaults to X509. Currently supported: PGP,X509</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">SERVER_ADMIN</i></p><h3 id=description>Description</h3><p>Encrypt files using pubkey encryption</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">SERVER_ADMIN</i></p><h3 id=description>Description</h3><p>Encrypt files using pubkey encryption</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/process_tracker/index.html b/vql_reference/misc/process_tracker/index.html
index 1e6863d2b19..aaa5810c48f 100644
--- a/vql_reference/misc/process_tracker/index.html
+++ b/vql_reference/misc/process_tracker/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>process_tracker :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/process_tracker/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/process_tracker/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>process_tracker</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#process_tracker>process_tracker</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=process_tracker>process_tracker</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>sync_query</td><td>Source for full tracker updates. Query must emit rows with the ProcessTrackerUpdate shape - usually uses pslist() to form a full sync.</td><td>StoredQuery</td></tr><tr><td>sync_period</td><td>How often to do a full sync (default 5000 msec).</td><td>int64</td></tr><tr><td>update_query</td><td>An Event query that produces live updates of the tracker state.</td><td>StoredQuery</td></tr><tr><td>max_size</td><td>Maximum size of process tracker LRU.</td><td>int64</td></tr><tr><td>enrichments</td><td>One or more VQL lambda functions that can enrich the data for the process.</td><td>list of string</td></tr></tbody></table><h3 id=description>Description</h3><p>Install a global process tracker.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>process_tracker</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#process_tracker>process_tracker</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=process_tracker>process_tracker</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>sync_query</td><td>Source for full tracker updates. Query must emit rows with the ProcessTrackerUpdate shape - usually uses pslist() to form a full sync.</td><td>StoredQuery</td></tr><tr><td>sync_period</td><td>How often to do a full sync (default 5000 msec).</td><td>int64</td></tr><tr><td>update_query</td><td>An Event query that produces live updates of the tracker state.</td><td>StoredQuery</td></tr><tr><td>max_size</td><td>Maximum size of process tracker LRU.</td><td>int64</td></tr><tr><td>enrichments</td><td>One or more VQL lambda functions that can enrich the data for the process.</td><td>list of string</td></tr></tbody></table><h3 id=description>Description</h3><p>Install a global process tracker.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/process_tracker_all/index.html b/vql_reference/misc/process_tracker_all/index.html
index 29c757b5137..a92bab67bae 100644
--- a/vql_reference/misc/process_tracker_all/index.html
+++ b/vql_reference/misc/process_tracker_all/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>process_tracker_all :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/process_tracker_all/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/process_tracker_all/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>process_tracker_all</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#process_tracker_all>process_tracker_all</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=process_tracker_all>process_tracker_all</h2><p><span class='vql_type pull-right page-header'>Function</span></p><h3 id=description>Description</h3><p>Get all processes stored in the tracker.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>process_tracker_all</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#process_tracker_all>process_tracker_all</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=process_tracker_all>process_tracker_all</h2><p><span class='vql_type pull-right page-header'>Function</span></p><h3 id=description>Description</h3><p>Get all processes stored in the tracker.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/process_tracker_callchain/index.html b/vql_reference/misc/process_tracker_callchain/index.html
index a91f585c85e..77049622b04 100644
--- a/vql_reference/misc/process_tracker_callchain/index.html
+++ b/vql_reference/misc/process_tracker_callchain/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>process_tracker_callchain :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/process_tracker_callchain/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/process_tracker_callchain/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>process_tracker_callchain</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#process_tracker_callchain>process_tracker_callchain</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=process_tracker_callchain>process_tracker_callchain</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>id</td><td>Process ID.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Get a call chain from the global process tracker.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>process_tracker_callchain</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#process_tracker_callchain>process_tracker_callchain</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=process_tracker_callchain>process_tracker_callchain</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>id</td><td>Process ID.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Get a call chain from the global process tracker.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/process_tracker_children/index.html b/vql_reference/misc/process_tracker_children/index.html
index 76783002d29..f52fb81932f 100644
--- a/vql_reference/misc/process_tracker_children/index.html
+++ b/vql_reference/misc/process_tracker_children/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>process_tracker_children :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/process_tracker_children/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/process_tracker_children/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>process_tracker_children</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#process_tracker_children>process_tracker_children</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=process_tracker_children>process_tracker_children</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>id</td><td>Process ID.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Get all children of a process.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>process_tracker_children</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#process_tracker_children>process_tracker_children</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=process_tracker_children>process_tracker_children</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>id</td><td>Process ID.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Get all children of a process.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/process_tracker_get/index.html b/vql_reference/misc/process_tracker_get/index.html
index 1f9b831237c..094b6757c76 100644
--- a/vql_reference/misc/process_tracker_get/index.html
+++ b/vql_reference/misc/process_tracker_get/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>process_tracker_get :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/process_tracker_get/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/process_tracker_get/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>process_tracker_get</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#process_tracker_get>process_tracker_get</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=process_tracker_get>process_tracker_get</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>id</td><td>Process ID.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Get a single process from the global tracker.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>process_tracker_get</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#process_tracker_get>process_tracker_get</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=process_tracker_get>process_tracker_get</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>id</td><td>Process ID.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Get a single process from the global tracker.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/process_tracker_pslist/index.html b/vql_reference/misc/process_tracker_pslist/index.html
index accad65e74c..b48f8b15aa3 100644
--- a/vql_reference/misc/process_tracker_pslist/index.html
+++ b/vql_reference/misc/process_tracker_pslist/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>process_tracker_pslist :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/process_tracker_pslist/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/process_tracker_pslist/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>process_tracker_pslist</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#process_tracker_pslist>process_tracker_pslist</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=process_tracker_pslist>process_tracker_pslist</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>List all processes from the process tracker.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>process_tracker_pslist</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#process_tracker_pslist>process_tracker_pslist</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=process_tracker_pslist>process_tracker_pslist</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>List all processes from the process tracker.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/process_tracker_tree/index.html b/vql_reference/misc/process_tracker_tree/index.html
index 4004b088a14..302b25b1a04 100644
--- a/vql_reference/misc/process_tracker_tree/index.html
+++ b/vql_reference/misc/process_tracker_tree/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>process_tracker_tree :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/process_tracker_tree/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/process_tracker_tree/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>process_tracker_tree</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#process_tracker_tree>process_tracker_tree</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=process_tracker_tree>process_tracker_tree</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>id</td><td>Process ID.</td><td>string</td></tr><tr><td>data_callback</td><td>A VQL Lambda function to that receives a ProcessEntry and returns the data node for each process.</td><td>Lambda</td></tr></tbody></table><h3 id=description>Description</h3><p>Get the full process tree under the process id.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>process_tracker_tree</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#process_tracker_tree>process_tracker_tree</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=process_tracker_tree>process_tracker_tree</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>id</td><td>Process ID.</td><td>string</td></tr><tr><td>data_callback</td><td>A VQL Lambda function to that receives a ProcessEntry and returns the data node for each process.</td><td>Lambda</td></tr></tbody></table><h3 id=description>Description</h3><p>Get the full process tree under the process id.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/process_tracker_updates/index.html b/vql_reference/misc/process_tracker_updates/index.html
index 1465245b8dc..e8a7696a068 100644
--- a/vql_reference/misc/process_tracker_updates/index.html
+++ b/vql_reference/misc/process_tracker_updates/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>process_tracker_updates :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/process_tracker_updates/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/process_tracker_updates/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>process_tracker_updates</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#process_tracker_updates>process_tracker_updates</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=process_tracker_updates>process_tracker_updates</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>Get the process tracker update events from the global process tracker.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>process_tracker_updates</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#process_tracker_updates>process_tracker_updates</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=process_tracker_updates>process_tracker_updates</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>Get the process tracker update events from the global process tracker.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/profile_goroutines/index.html b/vql_reference/misc/profile_goroutines/index.html
index 6c690d23c9a..fb41ec90fd2 100644
--- a/vql_reference/misc/profile_goroutines/index.html
+++ b/vql_reference/misc/profile_goroutines/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>profile_goroutines :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/profile_goroutines/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/profile_goroutines/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>profile_goroutines</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#profile_goroutines>profile_goroutines</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=profile_goroutines>profile_goroutines</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Enumerates all running goroutines.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Enumerates all running goroutines.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/profile_memory/index.html b/vql_reference/misc/profile_memory/index.html
index 5d7b7c5aa1e..228e0f1f706 100644
--- a/vql_reference/misc/profile_memory/index.html
+++ b/vql_reference/misc/profile_memory/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>profile_memory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/profile_memory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/profile_memory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>profile_memory</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#profile_memory>profile_memory</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=profile_memory>profile_memory</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Enumerates all in use memory within the runtime.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Enumerates all in use memory within the runtime.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/pskill/index.html b/vql_reference/misc/pskill/index.html
index c83ebea90ad..a87ed7c0ec8 100644
--- a/vql_reference/misc/pskill/index.html
+++ b/vql_reference/misc/pskill/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>pskill :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/pskill/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/pskill/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>pskill</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#pskill>pskill</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=pskill>pskill</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>pid</td><td>A pid to kill.</td><td>int64 (required)</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">EXECVE</i></p><h3 id=description>Description</h3><p>Kill the specified process.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">EXECVE</i></p><h3 id=description>Description</h3><p>Kill the specified process.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/query/index.html b/vql_reference/misc/query/index.html
index 077702f4b67..d411f92a9f6 100644
--- a/vql_reference/misc/query/index.html
+++ b/vql_reference/misc/query/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>query :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/query/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/query/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>query</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#query>query</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=query>query</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>query</td><td>A VQL Query to parse and execute.</td><td>Any (required)</td></tr><tr><td>env</td><td>A dict of args to insert into the scope.</td><td>ordereddict.Dict</td></tr><tr><td>cpu_limit</td><td>Average CPU usage in percent of a core.</td><td>float64</td></tr><tr><td>iops_limit</td><td>Average IOPs to target.</td><td>float64</td></tr><tr><td>timeout</td><td>Cancel the query after this many seconds</td><td>float64</td></tr><tr><td>progress_timeout</td><td>If no progress is detected in this many seconds, we terminate the query and output debugging information</td><td>float64</td></tr><tr><td>org_id</td><td>If specified, the query will run in the specified org space (Use &lsquo;root&rsquo; to refer to the root org)</td><td>string</td></tr><tr><td>runas</td><td>If specified, the query will run as the specified user</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">IMPERSONATION</i></p><h3 id=description>Description</h3><p>Evaluate a VQL query.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">IMPERSONATION</i></p><h3 id=description>Description</h3><p>Evaluate a VQL query.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/read_crypto_file/index.html b/vql_reference/misc/read_crypto_file/index.html
index 12b3cc63bb3..bed81ec4496 100644
--- a/vql_reference/misc/read_crypto_file/index.html
+++ b/vql_reference/misc/read_crypto_file/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>read_crypto_file :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/read_crypto_file/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/read_crypto_file/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>read_crypto_file</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#read_crypto_file>read_crypto_file</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=read_crypto_file>read_crypto_file</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>filename</td><td>Path to the file to write</td><td>OSPath (required)</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Read a previously stored encrypted local storage file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Read a previously stored encrypted local storage file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/rekey/index.html b/vql_reference/misc/rekey/index.html
index c1d47eaa488..730baf46425 100644
--- a/vql_reference/misc/rekey/index.html
+++ b/vql_reference/misc/rekey/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>rekey :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/rekey/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/rekey/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>rekey</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#rekey>rekey</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=rekey>rekey</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>wait</td><td>Wait this long before rekeying the client.</td><td>int64</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">EXECVE</i></p><h3 id=description>Description</h3><p>Causes the client to rekey and regenerate a new client ID. DANGEROUS! This will change the client&rsquo;s identity and it will appear as a new client in the GUI.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">EXECVE</i></p><h3 id=description>Description</h3><p>Causes the client to rekey and regenerate a new client ID. DANGEROUS! This will change the client&rsquo;s identity and it will appear as a new client in the GUI.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/remap/index.html b/vql_reference/misc/remap/index.html
index b53bf2ad354..a623e1db839 100644
--- a/vql_reference/misc/remap/index.html
+++ b/vql_reference/misc/remap/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>remap :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/remap/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/remap/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>remap</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#remap>remap</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=remap>remap</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>config</td><td>A Valid remapping configuration in YAML format</td><td>string (required)</td></tr><tr><td>copy</td><td>Accessors to copy to the new scope</td><td>list of string</td></tr><tr><td>clear</td><td>If set we clear all accessors from the device manager</td><td>bool</td></tr></tbody></table><h3 id=description>Description</h3><p>Apply a remapping configuration to the root scope.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>remap</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#remap>remap</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=remap>remap</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>config</td><td>A Valid remapping configuration in YAML format</td><td>string (required)</td></tr><tr><td>copy</td><td>Accessors to copy to the new scope</td><td>list of string</td></tr><tr><td>clear</td><td>If set we clear all accessors from the device manager</td><td>bool</td></tr></tbody></table><h3 id=description>Description</h3><p>Apply a remapping configuration to the root scope.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/repack/index.html b/vql_reference/misc/repack/index.html
index 1ff524fcbfb..5598bec262d 100644
--- a/vql_reference/misc/repack/index.html
+++ b/vql_reference/misc/repack/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>repack :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/repack/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/repack/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>repack</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#repack>repack</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=repack>repack</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>target</td><td>The name of the target OS to repack (VelociraptorWindows, VelociraptorLinux, VelociraptorDarwin)</td><td>string</td></tr><tr><td>version</td><td>Velociraptor Version to repack</td><td>string</td></tr><tr><td>exe</td><td>Alternative a path to the executable to repack</td><td>OSPath</td></tr><tr><td>accessor</td><td>The accessor to use to read the file.</td><td>string</td></tr><tr><td>binaries</td><td>List of tool names that will be repacked into the target</td><td>list of string</td></tr><tr><td>config</td><td>The config to be repacked in the form of a json or yaml string</td><td>string (required)</td></tr><tr><td>upload_name</td><td>The name of the upload to create</td><td>string (required)</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">COLLECT_SERVER</i></p><h3 id=description>Description</h3><p>Repack and upload a repacked binary or MSI to the server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">COLLECT_SERVER</i></p><h3 id=description>Description</h3><p>Repack and upload a repacked binary or MSI to the server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/server_frontend_cert/index.html b/vql_reference/misc/server_frontend_cert/index.html
index fe8ba92fcbb..aa8afc197fa 100644
--- a/vql_reference/misc/server_frontend_cert/index.html
+++ b/vql_reference/misc/server_frontend_cert/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>server_frontend_cert :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/server_frontend_cert/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/server_frontend_cert/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>server_frontend_cert</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#server_frontend_cert>server_frontend_cert</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=server_frontend_cert>server_frontend_cert</h2><p><span class='vql_type pull-right page-header'>Function</span></p><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Get Server Frontend Certificate</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Get Server Frontend Certificate</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/sigma/index.html b/vql_reference/misc/sigma/index.html
index 8a599dec268..fcb678442a2 100644
--- a/vql_reference/misc/sigma/index.html
+++ b/vql_reference/misc/sigma/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>sigma :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/sigma/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/sigma/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>sigma</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#sigma>sigma</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=sigma>sigma</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>rules</td><td>A list of sigma rules to compile.</td><td>list of string (required)</td></tr><tr><td>log_sources</td><td>A log source object as obtained from the sigma_log_sources() VQL function.</td><td>Any (required)</td></tr><tr><td>field_mapping</td><td>A dict containing a mapping between a rule field name and a VQL Lambda to get the value of the field from the event.</td><td>ordereddict.Dict</td></tr><tr><td>debug</td><td>If enabled we emit all match objects with description of what would match.</td><td>bool</td></tr><tr><td>rule_filter</td><td>If specified we use this callback to filter the rules for inclusion.</td><td>Lambda</td></tr><tr><td>default_details</td><td>If specified we use this callback to determine a details column if the sigma rule does not specify it.</td><td>Lambda</td></tr></tbody></table><h3 id=description>Description</h3><p>Evaluate sigma rules.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>sigma</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#sigma>sigma</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=sigma>sigma</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>rules</td><td>A list of sigma rules to compile.</td><td>list of string (required)</td></tr><tr><td>log_sources</td><td>A log source object as obtained from the sigma_log_sources() VQL function.</td><td>Any (required)</td></tr><tr><td>field_mapping</td><td>A dict containing a mapping between a rule field name and a VQL Lambda to get the value of the field from the event.</td><td>ordereddict.Dict</td></tr><tr><td>debug</td><td>If enabled we emit all match objects with description of what would match.</td><td>bool</td></tr><tr><td>rule_filter</td><td>If specified we use this callback to filter the rules for inclusion.</td><td>Lambda</td></tr><tr><td>default_details</td><td>If specified we use this callback to determine a details column if the sigma rule does not specify it.</td><td>Lambda</td></tr></tbody></table><h3 id=description>Description</h3><p>Evaluate sigma rules.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/sigma_log_sources/index.html b/vql_reference/misc/sigma_log_sources/index.html
index ae6e259c4e7..c088bc91bd0 100644
--- a/vql_reference/misc/sigma_log_sources/index.html
+++ b/vql_reference/misc/sigma_log_sources/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>sigma_log_sources :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/sigma_log_sources/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/sigma_log_sources/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>sigma_log_sources</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#sigma_log_sources>sigma_log_sources</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=sigma_log_sources>sigma_log_sources</h2><p><span class='vql_type pull-right page-header'>Function</span></p><h3 id=description>Description</h3><p>Constructs a Log sources object to be used in sigma rules. Call with args being category/product/service and values being stored queries. You may use a * as a placeholder for any of these fields.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>sigma_log_sources</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#sigma_log_sources>sigma_log_sources</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=sigma_log_sources>sigma_log_sources</h2><p><span class='vql_type pull-right page-header'>Function</span></p><h3 id=description>Description</h3><p>Constructs a Log sources object to be used in sigma rules. Call with args being category/product/service and values being stored queries. You may use a * as a placeholder for any of these fields.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/sysinfo/index.html b/vql_reference/misc/sysinfo/index.html
index 369479f7f28..4de4e11c6af 100644
--- a/vql_reference/misc/sysinfo/index.html
+++ b/vql_reference/misc/sysinfo/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>sysinfo :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/sysinfo/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/sysinfo/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>sysinfo</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#sysinfo>sysinfo</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=sysinfo>sysinfo</h2><p><span class='vql_type pull-right page-header'>Function</span></p><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Collect system information on Linux clients</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Collect system information on Linux clients</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/tlsh_hash/index.html b/vql_reference/misc/tlsh_hash/index.html
index 5be1142f50b..46b2ab34eb1 100644
--- a/vql_reference/misc/tlsh_hash/index.html
+++ b/vql_reference/misc/tlsh_hash/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>tlsh_hash :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/tlsh_hash/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/tlsh_hash/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>tlsh_hash</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#tlsh_hash>tlsh_hash</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=tlsh_hash>tlsh_hash</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>Path to open and hash.</td><td>OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Calculate the tlsh hash of a file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Calculate the tlsh hash of a file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/trace/index.html b/vql_reference/misc/trace/index.html
index 667c426a312..41b994dc9ba 100644
--- a/vql_reference/misc/trace/index.html
+++ b/vql_reference/misc/trace/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>trace :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/trace/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/trace/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>trace</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#trace>trace</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=trace>trace</h2><p><span class='vql_type pull-right page-header'>Function</span></p><h3 id=description>Description</h3><p>Upload a trace file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>trace</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#trace>trace</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=trace>trace</h2><p><span class='vql_type pull-right page-header'>Function</span></p><h3 id=description>Description</h3><p>Upload a trace file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/upload_azure/index.html b/vql_reference/misc/upload_azure/index.html
index 556e91cd9bc..ac3cbefce42 100644
--- a/vql_reference/misc/upload_azure/index.html
+++ b/vql_reference/misc/upload_azure/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>upload_azure :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/upload_azure/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/upload_azure/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>upload_azure</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#upload_azure>upload_azure</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=upload_azure>upload_azure</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>file</td><td>The file to upload</td><td>OSPath (required)</td></tr><tr><td>name</td><td>The name of the file that should be stored on the server</td><td>string</td></tr><tr><td>accessor</td><td>The accessor to use</td><td>string</td></tr><tr><td>sas_url</td><td>A SAS URL to use for upload to the container.</td><td>string (required)</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Upload files to Azure Blob Storage Service.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Upload files to Azure Blob Storage Service.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/upload_smb/index.html b/vql_reference/misc/upload_smb/index.html
index c592466d090..47888be12a0 100644
--- a/vql_reference/misc/upload_smb/index.html
+++ b/vql_reference/misc/upload_smb/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>upload_smb :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/upload_smb/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/upload_smb/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>upload_smb</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#upload_smb>upload_smb</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=upload_smb>upload_smb</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>file</td><td>The file to upload</td><td>OSPath (required)</td></tr><tr><td>name</td><td>The name of the file that should be stored on the server</td><td>OSPath</td></tr><tr><td>accessor</td><td>The accessor to use</td><td>string</td></tr><tr><td>username</td><td>The SMB username to login as (if not provided we use the SMB_CREDENTIALS env)</td><td>string</td></tr><tr><td>password</td><td>The SMB password to login as (if not provided we use the SMB_CREDENTIALS env)</td><td>string</td></tr><tr><td>server_address</td><td>The SMB server address and optionally port followed by the share name (e.g. \192.168.1.1:445\ShareName)</td><td>string (required)</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Upload files using the SMB file share protocol.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Upload files using the SMB file share protocol.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/user/index.html b/vql_reference/misc/user/index.html
index 2ba68d46866..a056ac6578e 100644
--- a/vql_reference/misc/user/index.html
+++ b/vql_reference/misc/user/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>user :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/user/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/user/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>user</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#user>user</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=user>user</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>user</td><td>The user to create or update.</td><td>string (required)</td></tr><tr><td>org</td><td>The org under which we query the user&rsquo;s ACL.</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Retrieves information about the Velociraptor user.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>user</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#user>user</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=user>user</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>user</td><td>The user to create or update.</td><td>string (required)</td></tr><tr><td>org</td><td>The org under which we query the user&rsquo;s ACL.</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Retrieves information about the Velociraptor user.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/user_grant/index.html b/vql_reference/misc/user_grant/index.html
index 65dda65934c..8cf7b910209 100644
--- a/vql_reference/misc/user_grant/index.html
+++ b/vql_reference/misc/user_grant/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>user_grant :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/user_grant/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/user_grant/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>user_grant</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#user_grant>user_grant</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=user_grant>user_grant</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>user</td><td>The user to create or update.</td><td>string (required)</td></tr><tr><td>roles</td><td>List of roles to give the user.</td><td>list of string</td></tr><tr><td>orgs</td><td>One or more org IDs to grant access to. If not specified we use current org</td><td>list of string</td></tr><tr><td>policy</td><td>A dict of permissions to set (e.g. as obtained from the gui_users() function).</td><td>ordereddict.Dict</td></tr></tbody></table><h3 id=description>Description</h3><p>Grants the user the specified roles.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>user_grant</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#user_grant>user_grant</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=user_grant>user_grant</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>user</td><td>The user to create or update.</td><td>string (required)</td></tr><tr><td>roles</td><td>List of roles to give the user.</td><td>list of string</td></tr><tr><td>orgs</td><td>One or more org IDs to grant access to. If not specified we use current org</td><td>list of string</td></tr><tr><td>policy</td><td>A dict of permissions to set (e.g. as obtained from the gui_users() function).</td><td>ordereddict.Dict</td></tr></tbody></table><h3 id=description>Description</h3><p>Grants the user the specified roles.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/vfs_ls/index.html b/vql_reference/misc/vfs_ls/index.html
index e5de2b01073..8e4161adc82 100644
--- a/vql_reference/misc/vfs_ls/index.html
+++ b/vql_reference/misc/vfs_ls/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>vfs_ls :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/vfs_ls/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/vfs_ls/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>vfs_ls</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#vfs_ls>vfs_ls</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=vfs_ls>vfs_ls</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>The directory to refresh.</td><td>OSPath</td></tr><tr><td>components</td><td>Alternatively a list of path components can be given.</td><td>list of string</td></tr><tr><td>accessor</td><td>An accessor to use.</td><td>string</td></tr><tr><td>depth</td><td>Depth of directory to list (default 0).</td><td>int64</td></tr></tbody></table><p>Required Permissions:
 <i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>List directory and build a VFS object.</p><p>This plugin is probably only useful as part of the
-System.VFS.ListDirectory artifact.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+System.VFS.ListDirectory artifact.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/write_crypto_file/index.html b/vql_reference/misc/write_crypto_file/index.html
index 942dbdda77f..da96f574945 100644
--- a/vql_reference/misc/write_crypto_file/index.html
+++ b/vql_reference/misc/write_crypto_file/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>write_crypto_file :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/write_crypto_file/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/write_crypto_file/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>write_crypto_file</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#write_crypto_file>write_crypto_file</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=write_crypto_file>write_crypto_file</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>filename</td><td>Path to the file to write</td><td>OSPath (required)</td></tr><tr><td>query</td><td>query to write into the file.</td><td>StoredQuery (required)</td></tr><tr><td>max_wait</td><td>How often to flush the file (default 60 sec).</td><td>uint64</td></tr><tr><td>max_rows</td><td>How many rows to buffer before writing (default 1000).</td><td>uint64</td></tr><tr><td>max_size</td><td>When the file grows to this size, truncate it (default 1Gb).</td><td>uint64</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_WRITE</i></p><h3 id=description>Description</h3><p>Write a query into an encrypted local storage file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_WRITE</i></p><h3 id=description>Description</h3><p>Write a query into an encrypted local storage file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/misc/write_jsonl/index.html b/vql_reference/misc/write_jsonl/index.html
index f25d24e4689..fc283fd844e 100644
--- a/vql_reference/misc/write_jsonl/index.html
+++ b/vql_reference/misc/write_jsonl/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>write_jsonl :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/write_jsonl/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/misc/write_jsonl/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>write_jsonl</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#write_jsonl>write_jsonl</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=write_jsonl>write_jsonl</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>filename</td><td>CSV files to open</td><td>OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use</td><td>string</td></tr><tr><td>query</td><td>query to write into the file.</td><td>StoredQuery (required)</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_WRITE</i></p><h3 id=description>Description</h3><p>Write a query into a JSONL file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_WRITE</i></p><h3 id=description>Description</h3><p>Write a query into a JSONL file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/grok/index.html b/vql_reference/parsers/grok/index.html
index 57a3a1fb6c8..3e6ea360e53 100644
--- a/vql_reference/parsers/grok/index.html
+++ b/vql_reference/parsers/grok/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>grok :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/grok/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/grok/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>grok</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#grok>grok</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=grok>grok</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>grok</td><td>Grok pattern.</td><td>string (required)</td></tr><tr><td>data</td><td>String to parse.</td><td>string (required)</td></tr><tr><td>patterns</td><td>Additional patterns.</td><td>Any</td></tr><tr><td>all_captures</td><td>Extract all captures.</td><td>bool</td></tr></tbody></table><h3 id=description>Description</h3><p>Parse a string using a Grok expression.</p><p>This is most useful for parsing syslog style logs (e.g. IIS, Apache logs).</p><p>You can read more about GROK expressions here
-<a href=https://www.elastic.co/blog/do-you-grok-grok>https://www.elastic.co/blog/do-you-grok-grok</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<a href=https://www.elastic.co/blog/do-you-grok-grok>https://www.elastic.co/blog/do-you-grok-grok</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/index.html b/vql_reference/parsers/index.html
index b501dbce7c5..3bad85b479c 100644
--- a/vql_reference/parsers/index.html
+++ b/vql_reference/parsers/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Parsers :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -73,4 +73,4 @@
 to allow the client to parse information for various files.</p><p>Simple file formats may be parsed using regular expressions and
 other generic rules. However some specialized file formats have
 dedicated parsers. These dedicated parsers are exported into VQL
-plugins so their results may be used in further queries.</p><table><thead><tr><th>Plugin/Function</th><th><span class=vql_type>Type</span></th><th>Description</th></tr></thead><tbody><tr><td><a href=grok>grok</a></td><td><span class=vql_type>Function</span></td><td>Parse a string using a Grok expression</td></tr><tr><td><a href=olevba>olevba</a></td><td><span class=vql_type>Plugin</span></td><td>Extracts VBA Macros from Office documents</td></tr><tr><td><a href=parse_auditd>parse_auditd</a></td><td><span class=vql_type>Plugin</span></td><td>Parse log files generated by auditd</td></tr><tr><td><a href=parse_binary>parse_binary</a></td><td><span class=vql_type>Function</span></td><td>Parse a binary file into a data structure using a profile</td></tr><tr><td><a href=parse_csv>parse_csv</a></td><td><span class=vql_type>Plugin</span></td><td>Parses events from a CSV file</td></tr><tr><td><a href=parse_ese>parse_ese</a></td><td><span class=vql_type>Plugin</span></td><td>Opens an ESE file and dump a table</td></tr><tr><td><a href=parse_ese_catalog>parse_ese_catalog</a></td><td><span class=vql_type>Plugin</span></td><td>Opens an ESE file and dump the schema</td></tr><tr><td><a href=parse_evtx>parse_evtx</a></td><td><span class=vql_type>Plugin</span></td><td>Parses events from an EVTX file</td></tr><tr><td><a href=parse_float>parse_float</a></td><td><span class=vql_type>Function</span></td><td>Convert a string to a float</td></tr><tr><td><a href=parse_json>parse_json</a></td><td><span class=vql_type>Function</span></td><td>Parse a JSON string into an object</td></tr><tr><td><a href=parse_json_array>parse_json_array</a></td><td><span class=vql_type>Function</span></td><td>Parse a JSON string into an array</td></tr><tr><td><a href=parse_json_array>parse_json_array</a></td><td><span class=vql_type>Plugin</span></td><td>Parses events from a line oriented json file</td></tr><tr><td><a href=parse_jsonl>parse_jsonl</a></td><td><span class=vql_type>Plugin</span></td><td>Parses a line oriented json file</td></tr><tr><td><a href=parse_lines>parse_lines</a></td><td><span class=vql_type>Plugin</span></td><td>Parse a file separated into lines</td></tr><tr><td><a href=parse_mft>parse_mft</a></td><td><span class=vql_type>Plugin</span></td><td>Scan the $MFT from an NTFS volume</td></tr><tr><td><a href=parse_ntfs>parse_ntfs</a></td><td><span class=vql_type>Function</span></td><td>Parse specific inodes from an NTFS image file or the raw device</td></tr><tr><td><a href=parse_ntfs_i30>parse_ntfs_i30</a></td><td><span class=vql_type>Plugin</span></td><td>Scan the $I30 stream from an NTFS MFT entry</td></tr><tr><td><a href=parse_ntfs_ranges>parse_ntfs_ranges</a></td><td><span class=vql_type>Plugin</span></td><td>Show the run ranges for an NTFS stream</td></tr><tr><td><a href=parse_pe>parse_pe</a></td><td><span class=vql_type>Function</span></td><td>Parse a PE file</td></tr><tr><td><a href=parse_pkcs7>parse_pkcs7</a></td><td><span class=vql_type>Function</span></td><td>Parse a DER encoded pkcs7 string into an object</td></tr><tr><td><a href=parse_records_with_regex>parse_records_with_regex</a></td><td><span class=vql_type>Plugin</span></td><td>Parses a file with a set of regexp and yields matches as records</td></tr><tr><td><a href=parse_recyclebin>parse_recyclebin</a></td><td><span class=vql_type>Plugin</span></td><td>Parses a $I file found in the $Recycle</td></tr><tr><td><a href=parse_string_with_regex>parse_string_with_regex</a></td><td><span class=vql_type>Function</span></td><td>Parse a string with a set of regex and extract fields</td></tr><tr><td><a href=parse_usn>parse_usn</a></td><td><span class=vql_type>Plugin</span></td><td>Parse the USN journal from a device</td></tr><tr><td><a href=parse_x509>parse_x509</a></td><td><span class=vql_type>Function</span></td><td>Parse a DER encoded x509 string into an object</td></tr><tr><td><a href=parse_xml>parse_xml</a></td><td><span class=vql_type>Function</span></td><td>Parse an XML document into a dict like object</td></tr><tr><td><a href=parse_yaml>parse_yaml</a></td><td><span class=vql_type>Function</span></td><td>Parse yaml into an object</td></tr><tr><td><a href=plist>plist</a></td><td><span class=vql_type>Function</span></td><td>Parse plist file</td></tr><tr><td><a href=plist>plist</a></td><td><span class=vql_type>Plugin</span></td><td>Parses a plist file</td></tr><tr><td><a href=prefetch>prefetch</a></td><td><span class=vql_type>Plugin</span></td><td>Parses a prefetch file</td></tr><tr><td><a href=regex_replace>regex_replace</a></td><td><span class=vql_type>Function</span></td><td>Search and replace a string with a regexp</td></tr><tr><td><a href=rot13>rot13</a></td><td><span class=vql_type>Function</span></td><td>Apply rot13 deobfuscation to the string</td></tr><tr><td><a href=split_records>split_records</a></td><td><span class=vql_type>Plugin</span></td><td>Parses files by splitting lines into records</td></tr><tr><td><a href=sqlite>sqlite</a></td><td><span class=vql_type>Plugin</span></td><td>Opens an SQLite file and run a query against it</td></tr><tr><td><a href=starl>starl</a></td><td><span class=vql_type>Function</span></td><td>Compile a starlark code block - returns a module usable in VQL</td></tr><tr><td><a href=xor>xor</a></td><td><span class=vql_type>Function</span></td><td>Apply xor to the string and key</td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+plugins so their results may be used in further queries.</p><table><thead><tr><th>Plugin/Function</th><th><span class=vql_type>Type</span></th><th>Description</th></tr></thead><tbody><tr><td><a href=grok>grok</a></td><td><span class=vql_type>Function</span></td><td>Parse a string using a Grok expression</td></tr><tr><td><a href=olevba>olevba</a></td><td><span class=vql_type>Plugin</span></td><td>Extracts VBA Macros from Office documents</td></tr><tr><td><a href=parse_auditd>parse_auditd</a></td><td><span class=vql_type>Plugin</span></td><td>Parse log files generated by auditd</td></tr><tr><td><a href=parse_binary>parse_binary</a></td><td><span class=vql_type>Function</span></td><td>Parse a binary file into a data structure using a profile</td></tr><tr><td><a href=parse_csv>parse_csv</a></td><td><span class=vql_type>Plugin</span></td><td>Parses events from a CSV file</td></tr><tr><td><a href=parse_ese>parse_ese</a></td><td><span class=vql_type>Plugin</span></td><td>Opens an ESE file and dump a table</td></tr><tr><td><a href=parse_ese_catalog>parse_ese_catalog</a></td><td><span class=vql_type>Plugin</span></td><td>Opens an ESE file and dump the schema</td></tr><tr><td><a href=parse_evtx>parse_evtx</a></td><td><span class=vql_type>Plugin</span></td><td>Parses events from an EVTX file</td></tr><tr><td><a href=parse_float>parse_float</a></td><td><span class=vql_type>Function</span></td><td>Convert a string to a float</td></tr><tr><td><a href=parse_json>parse_json</a></td><td><span class=vql_type>Function</span></td><td>Parse a JSON string into an object</td></tr><tr><td><a href=parse_json_array>parse_json_array</a></td><td><span class=vql_type>Function</span></td><td>Parse a JSON string into an array</td></tr><tr><td><a href=parse_json_array>parse_json_array</a></td><td><span class=vql_type>Plugin</span></td><td>Parses events from a line oriented json file</td></tr><tr><td><a href=parse_jsonl>parse_jsonl</a></td><td><span class=vql_type>Plugin</span></td><td>Parses a line oriented json file</td></tr><tr><td><a href=parse_lines>parse_lines</a></td><td><span class=vql_type>Plugin</span></td><td>Parse a file separated into lines</td></tr><tr><td><a href=parse_mft>parse_mft</a></td><td><span class=vql_type>Plugin</span></td><td>Scan the $MFT from an NTFS volume</td></tr><tr><td><a href=parse_ntfs>parse_ntfs</a></td><td><span class=vql_type>Function</span></td><td>Parse specific inodes from an NTFS image file or the raw device</td></tr><tr><td><a href=parse_ntfs_i30>parse_ntfs_i30</a></td><td><span class=vql_type>Plugin</span></td><td>Scan the $I30 stream from an NTFS MFT entry</td></tr><tr><td><a href=parse_ntfs_ranges>parse_ntfs_ranges</a></td><td><span class=vql_type>Plugin</span></td><td>Show the run ranges for an NTFS stream</td></tr><tr><td><a href=parse_pe>parse_pe</a></td><td><span class=vql_type>Function</span></td><td>Parse a PE file</td></tr><tr><td><a href=parse_pkcs7>parse_pkcs7</a></td><td><span class=vql_type>Function</span></td><td>Parse a DER encoded pkcs7 string into an object</td></tr><tr><td><a href=parse_records_with_regex>parse_records_with_regex</a></td><td><span class=vql_type>Plugin</span></td><td>Parses a file with a set of regexp and yields matches as records</td></tr><tr><td><a href=parse_recyclebin>parse_recyclebin</a></td><td><span class=vql_type>Plugin</span></td><td>Parses a $I file found in the $Recycle</td></tr><tr><td><a href=parse_string_with_regex>parse_string_with_regex</a></td><td><span class=vql_type>Function</span></td><td>Parse a string with a set of regex and extract fields</td></tr><tr><td><a href=parse_usn>parse_usn</a></td><td><span class=vql_type>Plugin</span></td><td>Parse the USN journal from a device</td></tr><tr><td><a href=parse_x509>parse_x509</a></td><td><span class=vql_type>Function</span></td><td>Parse a DER encoded x509 string into an object</td></tr><tr><td><a href=parse_xml>parse_xml</a></td><td><span class=vql_type>Function</span></td><td>Parse an XML document into a dict like object</td></tr><tr><td><a href=parse_yaml>parse_yaml</a></td><td><span class=vql_type>Function</span></td><td>Parse yaml into an object</td></tr><tr><td><a href=plist>plist</a></td><td><span class=vql_type>Function</span></td><td>Parse plist file</td></tr><tr><td><a href=plist>plist</a></td><td><span class=vql_type>Plugin</span></td><td>Parses a plist file</td></tr><tr><td><a href=prefetch>prefetch</a></td><td><span class=vql_type>Plugin</span></td><td>Parses a prefetch file</td></tr><tr><td><a href=regex_replace>regex_replace</a></td><td><span class=vql_type>Function</span></td><td>Search and replace a string with a regexp</td></tr><tr><td><a href=rot13>rot13</a></td><td><span class=vql_type>Function</span></td><td>Apply rot13 deobfuscation to the string</td></tr><tr><td><a href=split_records>split_records</a></td><td><span class=vql_type>Plugin</span></td><td>Parses files by splitting lines into records</td></tr><tr><td><a href=sqlite>sqlite</a></td><td><span class=vql_type>Plugin</span></td><td>Opens an SQLite file and run a query against it</td></tr><tr><td><a href=starl>starl</a></td><td><span class=vql_type>Function</span></td><td>Compile a starlark code block - returns a module usable in VQL</td></tr><tr><td><a href=xor>xor</a></td><td><span class=vql_type>Function</span></td><td>Apply xor to the string and key</td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/olevba/index.html b/vql_reference/parsers/olevba/index.html
index 33259a80e9b..de3b3e5cd74 100644
--- a/vql_reference/parsers/olevba/index.html
+++ b/vql_reference/parsers/olevba/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>olevba :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/olevba/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/olevba/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 <span class=links>olevba</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#olevba>olevba</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=olevba>olevba</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>file</td><td>A list of filenames to open as OLE files.</td><td>list of OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr><tr><td>max_size</td><td>Maximum size of file we load into memory.</td><td>int64</td></tr></tbody></table><p>Required Permissions:
 <i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Extracts VBA Macros from Office documents.</p><p>This plugin parses the provided files as OLE documents in order to
 recover VB macro code. A single document can have multiple code
-objects, and each such code object is emitted as a row.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+objects, and each such code object is emitted as a row.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_auditd/index.html b/vql_reference/parsers/parse_auditd/index.html
index d624a6755d9..72bef33025c 100644
--- a/vql_reference/parsers/parse_auditd/index.html
+++ b/vql_reference/parsers/parse_auditd/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_auditd :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_auditd/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_auditd/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>parse_auditd</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_auditd>parse_auditd</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_auditd>parse_auditd</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>filename</td><td>A list of log files to parse.</td><td>list of OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr><tr><td>buffer_size</td><td>Maximum size of line buffer.</td><td>int</td></tr></tbody></table><h3 id=description>Description</h3><p>Parse log files generated by auditd.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>parse_auditd</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_auditd>parse_auditd</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_auditd>parse_auditd</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>filename</td><td>A list of log files to parse.</td><td>list of OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr><tr><td>buffer_size</td><td>Maximum size of line buffer.</td><td>int</td></tr></tbody></table><h3 id=description>Description</h3><p>Parse log files generated by auditd.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_binary/index.html b/vql_reference/parsers/parse_binary/index.html
index f24badb03e5..d014e341710 100644
--- a/vql_reference/parsers/parse_binary/index.html
+++ b/vql_reference/parsers/parse_binary/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_binary :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_binary/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_binary/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -84,4 +84,4 @@
 a background in parsing binary data for forensic purposes and for
 instructions on how to construct profiles like the example above.</p><p>More detailed information about profiles and their implementation
 can be found in the <a href=https://github.com/Velocidex/vtypes>vfilter</a>
-module documentation.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+module documentation.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_csv/index.html b/vql_reference/parsers/parse_csv/index.html
index 48140ebcc0f..bef8eb27107 100644
--- a/vql_reference/parsers/parse_csv/index.html
+++ b/vql_reference/parsers/parse_csv/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_csv :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_csv/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_csv/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -82,4 +82,4 @@
 FROM parse_csv(filename=&quot;All Windows.Applications.Chrome.Extensions.csv&quot;)
 Order By TotalUsers
 Group By Name
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_ese/index.html b/vql_reference/parsers/parse_ese/index.html
index 38524635c61..f0dfad12271 100644
--- a/vql_reference/parsers/parse_ese/index.html
+++ b/vql_reference/parsers/parse_ese/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_ese :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_ese/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_ese/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>parse_ese</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_ese>parse_ese</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_ese>parse_ese</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>file</td><td></td><td>OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr><tr><td>table</td><td>A table name to dump</td><td>string (required)</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Opens an ESE file and dump a table.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Opens an ESE file and dump a table.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_ese_catalog/index.html b/vql_reference/parsers/parse_ese_catalog/index.html
index f1bacae4ad0..04854f2fc65 100644
--- a/vql_reference/parsers/parse_ese_catalog/index.html
+++ b/vql_reference/parsers/parse_ese_catalog/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_ese_catalog :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_ese_catalog/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_ese_catalog/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>parse_ese_catalog</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_ese_catalog>parse_ese_catalog</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_ese_catalog>parse_ese_catalog</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>file</td><td></td><td>OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Opens an ESE file and dump the schema.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Opens an ESE file and dump the schema.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_evtx/index.html b/vql_reference/parsers/parse_evtx/index.html
index 0f0010de7d2..727939a153a 100644
--- a/vql_reference/parsers/parse_evtx/index.html
+++ b/vql_reference/parsers/parse_evtx/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_evtx :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_evtx/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_evtx/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -81,4 +81,4 @@
        EventData as _EventData,
        System as _System
 FROM watch_evtx(filename=systemLogFile) WHERE EventID = 7045
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_float/index.html b/vql_reference/parsers/parse_float/index.html
index ea3129c4bc5..09521461ee4 100644
--- a/vql_reference/parsers/parse_float/index.html
+++ b/vql_reference/parsers/parse_float/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_float :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_float/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_float/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>parse_float</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_float>parse_float</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_float>parse_float</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>A string to convert to int</td><td>Any (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Convert a string to a float.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>parse_float</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_float>parse_float</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_float>parse_float</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>A string to convert to int</td><td>Any (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Convert a string to a float.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_json/index.html b/vql_reference/parsers/parse_json/index.html
index 788ff64434e..1a6479aabb1 100644
--- a/vql_reference/parsers/parse_json/index.html
+++ b/vql_reference/parsers/parse_json/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_json :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_json/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_json/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>parse_json</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_json>parse_json</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_json>parse_json</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>data</td><td>Json encoded string.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Parse a JSON string into an object.</p><p>Note that when VQL dereferences fields in a dict it returns a Null for
 those fields that do not exist. Thus there is no error in actually
-accessing missing fields, the column will just return nil.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+accessing missing fields, the column will just return nil.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_json_array/index.html b/vql_reference/parsers/parse_json_array/index.html
index 1b816e3c92f..7d436cd1b25 100644
--- a/vql_reference/parsers/parse_json_array/index.html
+++ b/vql_reference/parsers/parse_json_array/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_json_array :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_json_array/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_json_array/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>parse_json_array</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_json_array>parse_json_array</a><ul><li><a href=#description>Description</a></li></ul></li><li><a href=#parse_json_array-1>parse_json_array</a><ul><li><a href=#description-1>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_json_array>parse_json_array</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>data</td><td>Json encoded string.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Parse a JSON string into an array.</p><p>This function is similar to <code>parse_json()</code> but works for a JSON list
-instead of an object.</p><div class=vql_item></div><h2 id=parse_json_array-1>parse_json_array</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>data</td><td>Json encoded string.</td><td>string (required)</td></tr></tbody></table><h3 id=description-1>Description</h3><p>Parses events from a line oriented json file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+instead of an object.</p><div class=vql_item></div><h2 id=parse_json_array-1>parse_json_array</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>data</td><td>Json encoded string.</td><td>string (required)</td></tr></tbody></table><h3 id=description-1>Description</h3><p>Parses events from a line oriented json file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_jsonl/index.html b/vql_reference/parsers/parse_jsonl/index.html
index 6e571d30847..72619ecf659 100644
--- a/vql_reference/parsers/parse_jsonl/index.html
+++ b/vql_reference/parsers/parse_jsonl/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_jsonl :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_jsonl/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_jsonl/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>parse_jsonl</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_jsonl>parse_jsonl</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_jsonl>parse_jsonl</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>filename</td><td>JSON file to open</td><td>OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Parses a line oriented json file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Parses a line oriented json file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_lines/index.html b/vql_reference/parsers/parse_lines/index.html
index 4c5e0a705ab..4855c997f66 100644
--- a/vql_reference/parsers/parse_lines/index.html
+++ b/vql_reference/parsers/parse_lines/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_lines :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_lines/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_lines/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>parse_lines</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_lines>parse_lines</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_lines>parse_lines</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>filename</td><td>A list of log files to parse.</td><td>list of OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr><tr><td>buffer_size</td><td>Maximum size of line buffer.</td><td>int</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Parse a file separated into lines.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Parse a file separated into lines.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_mft/index.html b/vql_reference/parsers/parse_mft/index.html
index 91037d6d35c..8f8b550eaf2 100644
--- a/vql_reference/parsers/parse_mft/index.html
+++ b/vql_reference/parsers/parse_mft/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_mft :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_mft/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_mft/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -79,4 +79,4 @@
        DelegateAccessor=&quot;file&quot;,
        DelegatePath='ntfs_image.dd'),
      accessor=&quot;raw_ntfs&quot;)
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_ntfs/index.html b/vql_reference/parsers/parse_ntfs/index.html
index dcc06eccc3a..9c6d2620347 100644
--- a/vql_reference/parsers/parse_ntfs/index.html
+++ b/vql_reference/parsers/parse_ntfs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_ntfs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_ntfs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_ntfs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -75,4 +75,4 @@
     inode=&quot;46-128-0&quot;)
 FROM scope()
 </code></pre><p>You can get the MFT entry number from <code>parse_mft()</code> or from the
-Data attribute of a <code>glob()</code> using the <code>ntfs</code> accessor.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+Data attribute of a <code>glob()</code> using the <code>ntfs</code> accessor.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_ntfs_i30/index.html b/vql_reference/parsers/parse_ntfs_i30/index.html
index a635d75c3cf..0229111d89a 100644
--- a/vql_reference/parsers/parse_ntfs_i30/index.html
+++ b/vql_reference/parsers/parse_ntfs_i30/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_ntfs_i30 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_ntfs_i30/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_ntfs_i30/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>parse_ntfs_i30</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_ntfs_i30>parse_ntfs_i30</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_ntfs_i30>parse_ntfs_i30</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>device</td><td>The device file to open. This may be a full path for example C:\Windows - we will figure out the device automatically.</td><td>string</td></tr><tr><td>filename</td><td>A raw image to open. You can also provide the accessor if using a raw image file.</td><td>OSPath</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr><tr><td>inode</td><td>The MFT entry to parse in inode notation (5-144-1).</td><td>string</td></tr><tr><td>mft</td><td>The MFT entry to parse.</td><td>int64</td></tr><tr><td>mft_offset</td><td>The offset to the MFT entry to parse.</td><td>int64</td></tr></tbody></table><h3 id=description>Description</h3><p>Scan the $I30 stream from an NTFS MFT entry.</p><p>This is similar in use to the parse_ntfs() function but parses the
-$I30 stream.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+$I30 stream.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_ntfs_ranges/index.html b/vql_reference/parsers/parse_ntfs_ranges/index.html
index eb33c1d4ef7..1a02f5e07db 100644
--- a/vql_reference/parsers/parse_ntfs_ranges/index.html
+++ b/vql_reference/parsers/parse_ntfs_ranges/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_ntfs_ranges :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_ntfs_ranges/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_ntfs_ranges/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>parse_ntfs_ranges</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_ntfs_ranges>parse_ntfs_ranges</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_ntfs_ranges>parse_ntfs_ranges</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>device</td><td>The device file to open. This may be a full path for example C:\Windows - we will figure out the device automatically.</td><td>string</td></tr><tr><td>filename</td><td>A raw image to open. You can also provide the accessor if using a raw image file.</td><td>OSPath</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr><tr><td>inode</td><td>The MFT entry to parse in inode notation (5-144-1).</td><td>string</td></tr><tr><td>mft</td><td>The MFT entry to parse.</td><td>int64</td></tr><tr><td>mft_offset</td><td>The offset to the MFT entry to parse.</td><td>int64</td></tr></tbody></table><h3 id=description>Description</h3><p>Show the run ranges for an NTFS stream.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>parse_ntfs_ranges</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_ntfs_ranges>parse_ntfs_ranges</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_ntfs_ranges>parse_ntfs_ranges</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>device</td><td>The device file to open. This may be a full path for example C:\Windows - we will figure out the device automatically.</td><td>string</td></tr><tr><td>filename</td><td>A raw image to open. You can also provide the accessor if using a raw image file.</td><td>OSPath</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr><tr><td>inode</td><td>The MFT entry to parse in inode notation (5-144-1).</td><td>string</td></tr><tr><td>mft</td><td>The MFT entry to parse.</td><td>int64</td></tr><tr><td>mft_offset</td><td>The offset to the MFT entry to parse.</td><td>int64</td></tr></tbody></table><h3 id=description>Description</h3><p>Show the run ranges for an NTFS stream.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_pe/index.html b/vql_reference/parsers/parse_pe/index.html
index b6c20dbf84c..1c5aff4bc58 100644
--- a/vql_reference/parsers/parse_pe/index.html
+++ b/vql_reference/parsers/parse_pe/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_pe :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_pe/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_pe/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>parse_pe</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_pe>parse_pe</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_pe>parse_pe</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>file</td><td>The PE file to open.</td><td>OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr><tr><td>base_offset</td><td>The offset in the file for the base address.</td><td>int64</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Parse a PE file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Parse a PE file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_pkcs7/index.html b/vql_reference/parsers/parse_pkcs7/index.html
index b202bcacdc6..59248ffa314 100644
--- a/vql_reference/parsers/parse_pkcs7/index.html
+++ b/vql_reference/parsers/parse_pkcs7/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_pkcs7 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_pkcs7/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_pkcs7/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>parse_pkcs7</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_pkcs7>parse_pkcs7</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_pkcs7>parse_pkcs7</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>data</td><td>PKCS7 DER encoded string.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Parse a DER encoded pkcs7 string into an object.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>parse_pkcs7</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_pkcs7>parse_pkcs7</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_pkcs7>parse_pkcs7</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>data</td><td>PKCS7 DER encoded string.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Parse a DER encoded pkcs7 string into an object.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_records_with_regex/index.html b/vql_reference/parsers/parse_records_with_regex/index.html
index 5064a4c1e12..3d8dc7ebbaf 100644
--- a/vql_reference/parsers/parse_records_with_regex/index.html
+++ b/vql_reference/parsers/parse_records_with_regex/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_records_with_regex :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_records_with_regex/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_records_with_regex/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -114,4 +114,4 @@
    FROM parse_records_with_regex(
      file=linuxDpkgStatus,
      regex='(?sm)^(?P&lt;Record&gt;Package:.+?)\\n\\n')
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_recyclebin/index.html b/vql_reference/parsers/parse_recyclebin/index.html
index aeb3cc20a3e..7c94ab9f56b 100644
--- a/vql_reference/parsers/parse_recyclebin/index.html
+++ b/vql_reference/parsers/parse_recyclebin/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_recyclebin :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_recyclebin/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_recyclebin/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>parse_recyclebin</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_recyclebin>parse_recyclebin</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_recyclebin>parse_recyclebin</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>filename</td><td>Files to be parsed.</td><td>list of OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Parses a $I file found in the $Recycle.Bin</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Parses a $I file found in the $Recycle.Bin</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_string_with_regex/index.html b/vql_reference/parsers/parse_string_with_regex/index.html
index 677acaed2ab..f1f9575cd83 100644
--- a/vql_reference/parsers/parse_string_with_regex/index.html
+++ b/vql_reference/parsers/parse_string_with_regex/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_string_with_regex :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_string_with_regex/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_string_with_regex/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>parse_string_with_regex</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_string_with_regex>parse_string_with_regex</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_string_with_regex>parse_string_with_regex</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>A string to parse.</td><td>string (required)</td></tr><tr><td>regex</td><td>The regex to apply.</td><td>list of string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Parse a string with a set of regex and extract fields. Returns a dict with fields populated from all regex capture variables.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>parse_string_with_regex</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_string_with_regex>parse_string_with_regex</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_string_with_regex>parse_string_with_regex</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>A string to parse.</td><td>string (required)</td></tr><tr><td>regex</td><td>The regex to apply.</td><td>list of string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Parse a string with a set of regex and extract fields. Returns a dict with fields populated from all regex capture variables.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_usn/index.html b/vql_reference/parsers/parse_usn/index.html
index 5a995995da0..3d6aa79e909 100644
--- a/vql_reference/parsers/parse_usn/index.html
+++ b/vql_reference/parsers/parse_usn/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_usn :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_usn/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_usn/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>parse_usn</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_usn>parse_usn</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_usn>parse_usn</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>device</td><td>The device file to open.</td><td>OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr><tr><td>start_offset</td><td>The starting offset of the first USN record to parse.</td><td>int64</td></tr></tbody></table><h3 id=description>Description</h3><p>Parse the USN journal from a device.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>parse_usn</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_usn>parse_usn</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_usn>parse_usn</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>device</td><td>The device file to open.</td><td>OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr><tr><td>start_offset</td><td>The starting offset of the first USN record to parse.</td><td>int64</td></tr></tbody></table><h3 id=description>Description</h3><p>Parse the USN journal from a device.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_x509/index.html b/vql_reference/parsers/parse_x509/index.html
index 053dc638ba3..9b67c7b8e03 100644
--- a/vql_reference/parsers/parse_x509/index.html
+++ b/vql_reference/parsers/parse_x509/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_x509 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_x509/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_x509/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>parse_x509</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_x509>parse_x509</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_x509>parse_x509</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>data</td><td>X509 DER encoded string.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Parse a DER encoded x509 string into an object.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>parse_x509</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_x509>parse_x509</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_x509>parse_x509</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>data</td><td>X509 DER encoded string.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Parse a DER encoded x509 string into an object.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_xml/index.html b/vql_reference/parsers/parse_xml/index.html
index 5397e42d522..e5ff63be10b 100644
--- a/vql_reference/parsers/parse_xml/index.html
+++ b/vql_reference/parsers/parse_xml/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_xml :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_xml/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_xml/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>parse_xml</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_xml>parse_xml</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_xml>parse_xml</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>file</td><td>XML file to open.</td><td>OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Parse an XML document into a dict like object.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Parse an XML document into a dict like object.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/parse_yaml/index.html b/vql_reference/parsers/parse_yaml/index.html
index 55f5ec34ef7..24311692123 100644
--- a/vql_reference/parsers/parse_yaml/index.html
+++ b/vql_reference/parsers/parse_yaml/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parse_yaml :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_yaml/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/parse_yaml/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>parse_yaml</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#parse_yaml>parse_yaml</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=parse_yaml>parse_yaml</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>filename</td><td>Yaml Filename</td><td>OSPath (required)</td></tr><tr><td>accessor</td><td>File accessor</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Parse yaml into an object.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Parse yaml into an object.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/plist/index.html b/vql_reference/parsers/plist/index.html
index b4c261e3309..915a444a0dd 100644
--- a/vql_reference/parsers/plist/index.html
+++ b/vql_reference/parsers/plist/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>plist :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/plist/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/plist/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>plist</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#plist>plist</a><ul><li><a href=#description>Description</a></li></ul></li><li><a href=#plist-1>plist</a><ul><li><a href=#description-1>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=plist>plist</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>file</td><td>A list of files to parse.</td><td>OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr></tbody></table><p>Required Permissions:
 <i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Parse plist file</p><div class=vql_item></div><h2 id=plist-1>plist</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>file</td><td>A list of files to parse.</td><td>list of OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description-1>Description</h3><p>Parses a plist file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description-1>Description</h3><p>Parses a plist file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/prefetch/index.html b/vql_reference/parsers/prefetch/index.html
index dd0727b8f8b..18af5f38525 100644
--- a/vql_reference/parsers/prefetch/index.html
+++ b/vql_reference/parsers/prefetch/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>prefetch :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/prefetch/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/prefetch/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>prefetch</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#prefetch>prefetch</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=prefetch>prefetch</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>filename</td><td>A list of event log files to parse.</td><td>list of OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Parses a prefetch file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Parses a prefetch file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/regex_replace/index.html b/vql_reference/parsers/regex_replace/index.html
index ab7794d1f82..ca873c931be 100644
--- a/vql_reference/parsers/regex_replace/index.html
+++ b/vql_reference/parsers/regex_replace/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>regex_replace :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/regex_replace/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/regex_replace/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>regex_replace</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#regex_replace>regex_replace</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=regex_replace>regex_replace</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>source</td><td>The source string to replace.</td><td>string (required)</td></tr><tr><td>replace</td><td>The substitute string.</td><td>string</td></tr><tr><td>replace_lambda</td><td>Optionally the replacement can be a lambda.</td><td>string</td></tr><tr><td>re</td><td>A regex to apply</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Search and replace a string with a regexp. Note you can use $1 to replace the capture string.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>regex_replace</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#regex_replace>regex_replace</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=regex_replace>regex_replace</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>source</td><td>The source string to replace.</td><td>string (required)</td></tr><tr><td>replace</td><td>The substitute string.</td><td>string</td></tr><tr><td>replace_lambda</td><td>Optionally the replacement can be a lambda.</td><td>string</td></tr><tr><td>re</td><td>A regex to apply</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Search and replace a string with a regexp. Note you can use $1 to replace the capture string.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/rot13/index.html b/vql_reference/parsers/rot13/index.html
index 058bf2b773b..b5efaec89df 100644
--- a/vql_reference/parsers/rot13/index.html
+++ b/vql_reference/parsers/rot13/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>rot13 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/rot13/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/rot13/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>rot13</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#rot13>rot13</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=rot13>rot13</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td></td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Apply rot13 deobfuscation to the string.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>rot13</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#rot13>rot13</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=rot13>rot13</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td></td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Apply rot13 deobfuscation to the string.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/split_records/index.html b/vql_reference/parsers/split_records/index.html
index 410a5a0291b..0cbd9396990 100644
--- a/vql_reference/parsers/split_records/index.html
+++ b/vql_reference/parsers/split_records/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>split_records :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/split_records/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/split_records/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>split_records</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#split_records>split_records</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=split_records>split_records</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>filenames</td><td>Files to parse.</td><td>list of OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use</td><td>string</td></tr><tr><td>regex</td><td>The split regular expression (e.g. a comma, default whitespace)</td><td>string</td></tr><tr><td>columns</td><td>If the first row is not the headers, this arg must provide a list of column names for each value.</td><td>list of string</td></tr><tr><td>first_row_is_headers</td><td>A bool indicating if we should get column names from the first row.</td><td>bool</td></tr><tr><td>count</td><td>Only split into this many columns if possible.</td><td>int</td></tr><tr><td>record_regex</td><td>A regex to split data into records (default</td><td>string</td></tr><tr><td>buffer_size</td><td>Maximum size of line buffer (default 64kb).</td><td>int</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Parses files by splitting lines into records.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Parses files by splitting lines into records.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/sqlite/index.html b/vql_reference/parsers/sqlite/index.html
index b34ab84523e..fa9db1f0ddc 100644
--- a/vql_reference/parsers/sqlite/index.html
+++ b/vql_reference/parsers/sqlite/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>sqlite :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/sqlite/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/sqlite/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>sqlite</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#sqlite>sqlite</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=sqlite>sqlite</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>file</td><td></td><td>OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr><tr><td>query</td><td></td><td>string (required)</td></tr><tr><td>args</td><td></td><td>Any</td></tr></tbody></table><h3 id=description>Description</h3><p>Opens an SQLite file and run a query against it.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>sqlite</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#sqlite>sqlite</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=sqlite>sqlite</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>file</td><td></td><td>OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr><tr><td>query</td><td></td><td>string (required)</td></tr><tr><td>args</td><td></td><td>Any</td></tr></tbody></table><h3 id=description>Description</h3><p>Opens an SQLite file and run a query against it.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/starl/index.html b/vql_reference/parsers/starl/index.html
index b0e7bc99314..0035ba6f98f 100644
--- a/vql_reference/parsers/starl/index.html
+++ b/vql_reference/parsers/starl/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>starl :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/starl/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/starl/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -83,4 +83,4 @@
 
 SELECT MyCode.Foo(X=32)
 FROM scope()
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/parsers/xor/index.html b/vql_reference/parsers/xor/index.html
index 2a1eee8c0f2..19cd9bf7cfb 100644
--- a/vql_reference/parsers/xor/index.html
+++ b/vql_reference/parsers/xor/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>xor :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/xor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/parsers/xor/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>xor</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#xor>xor</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=xor>xor</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>String to apply Xor</td><td>string (required)</td></tr><tr><td>key</td><td>Xor key.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Apply xor to the string and key.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>xor</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#xor>xor</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=xor>xor</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>String to apply Xor</td><td>string (required)</td></tr><tr><td>key</td><td>Xor key.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Apply xor to the string and key.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/chain/index.html b/vql_reference/plugin/chain/index.html
index bbda5e23f8d..0a4dd4bb659 100644
--- a/vql_reference/plugin/chain/index.html
+++ b/vql_reference/plugin/chain/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>chain :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/chain/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/chain/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -77,4 +77,4 @@
   a={ SELECT ...},
   b={ SELECT ...},
   async=TRUE)
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/collect/index.html b/vql_reference/plugin/collect/index.html
index aa5a5093570..98c47a36928 100644
--- a/vql_reference/plugin/collect/index.html
+++ b/vql_reference/plugin/collect/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>collect :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/collect/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/collect/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>collect</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#collect>collect</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=collect>collect</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>artifacts</td><td>A list of artifacts to collect.</td><td>list of string (required)</td></tr><tr><td>output</td><td>A path to write the output file on.</td><td>string</td></tr><tr><td>report</td><td>A path to write the report on (deprecated and ignored).</td><td>string</td></tr><tr><td>args</td><td>Optional parameters.</td><td>Any</td></tr><tr><td>password</td><td>An optional password to encrypt the collection zip.</td><td>string</td></tr><tr><td>format</td><td>Output format (csv, jsonl, csv_only).</td><td>string</td></tr><tr><td>artifact_definitions</td><td>Optional additional custom artifacts.</td><td>Any</td></tr><tr><td>template</td><td>(Deprecated Ignored).</td><td>string</td></tr><tr><td>level</td><td>Compression level between 0 (no compression) and 9.</td><td>int64</td></tr><tr><td>ops_per_sec</td><td>Rate limiting for collections (deprecated).</td><td>int64</td></tr><tr><td>cpu_limit</td><td>Set query cpu_limit value</td><td>float64</td></tr><tr><td>iops_limit</td><td>Set query iops_limit value</td><td>float64</td></tr><tr><td>progress_timeout</td><td>If no progress is detected in this many seconds, we terminate the query and output debugging information</td><td>float64</td></tr><tr><td>timeout</td><td>Total amount of time in seconds, this collection will take. Collection is cancelled when timeout is exceeded.</td><td>float64</td></tr><tr><td>metadata</td><td>Metadata to store in the zip archive. Outputs to metadata.json in top level of zip file.</td><td>StoredQuery</td></tr><tr><td>concurrency</td><td>Number of concurrent collections.</td><td>int64</td></tr></tbody></table><p>Required Permissions:
 <i class="linkcolour label pull-right label-success">FILESYSTEM_WRITE</i></p><h3 id=description>Description</h3><p>Collect artifacts into a local file.</p><p>This plugin is essentially the same as the <code>velociraptor artifacts collect --output file.zip</code> command. It will collect the artifacts
-into a zip file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+into a zip file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/commandline_split/index.html b/vql_reference/plugin/commandline_split/index.html
index fa5d00433d9..156305c3e5c 100644
--- a/vql_reference/plugin/commandline_split/index.html
+++ b/vql_reference/plugin/commandline_split/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>commandline_split :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/commandline_split/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/commandline_split/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -73,4 +73,4 @@
   commandline_split(command='''&quot;C:\Program Files\Velociraptor\Velociraptor.exe&quot; service run'''),
   commandline_split(command=&quot;/usr/bin/ls -l 'file with space.txt'&quot;, bash_style=TRUE)
 FROM scope()
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/connections/index.html b/vql_reference/plugin/connections/index.html
index 64dff75bda9..7fd6c3349cb 100644
--- a/vql_reference/plugin/connections/index.html
+++ b/vql_reference/plugin/connections/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>connections :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/connections/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/connections/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>connections</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#connections>connections</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=connections>connections</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>List all active connections</p><p>On windows this uses the API to list active sockets.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>List all active connections</p><p>On windows this uses the API to list active sockets.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/crypto_rc4/index.html b/vql_reference/plugin/crypto_rc4/index.html
index 6859fa69491..f1422169c3c 100644
--- a/vql_reference/plugin/crypto_rc4/index.html
+++ b/vql_reference/plugin/crypto_rc4/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>crypto_rc4 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/crypto_rc4/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/crypto_rc4/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>crypto_rc4</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#crypto_rc4>crypto_rc4</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=crypto_rc4>crypto_rc4</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>String to apply Rc4 encryption</td><td>string (required)</td></tr><tr><td>key</td><td>Rc4 key (1-256bytes).</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Apply rc4 to the string and key.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>crypto_rc4</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#crypto_rc4>crypto_rc4</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=crypto_rc4>crypto_rc4</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>String to apply Rc4 encryption</td><td>string (required)</td></tr><tr><td>key</td><td>Rc4 key (1-256bytes).</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Apply rc4 to the string and key.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/environ/index.html b/vql_reference/plugin/environ/index.html
index 3c497495573..04423b49817 100644
--- a/vql_reference/plugin/environ/index.html
+++ b/vql_reference/plugin/environ/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>environ :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/environ/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/environ/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>environ</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#environ>environ</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=environ>environ</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>vars</td><td>Extract these variables from the environment and return them one per row</td><td>list of string</td></tr></tbody></table><h3 id=description>Description</h3><p>The row returned will have all environment variables as
 columns. If the var parameter is provided, only those variables
-will be provided.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+will be provided.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/execve/index.html b/vql_reference/plugin/execve/index.html
index e850d6639dc..bc80fca80a8 100644
--- a/vql_reference/plugin/execve/index.html
+++ b/vql_reference/plugin/execve/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>execve :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/execve/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/execve/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -79,4 +79,4 @@
 automatically. If you need to run programs which are not usually
 installed (e.g. Sysinternal&rsquo;s autoruns.exe) you will need to use
 Velociraptor&rsquo;s external tools feature to deliver and manage the
-tools on the client.</p><p><a href=https://docs.velociraptor.app/docs/extending_vql/#using-external-tools>https://docs.velociraptor.app/docs/extending_vql/#using-external-tools</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+tools on the client.</p><p><a href=https://docs.velociraptor.app/docs/extending_vql/#using-external-tools>https://docs.velociraptor.app/docs/extending_vql/#using-external-tools</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/filesystems/index.html b/vql_reference/plugin/filesystems/index.html
index 0e25728e3fd..8045d83179b 100644
--- a/vql_reference/plugin/filesystems/index.html
+++ b/vql_reference/plugin/filesystems/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>filesystems :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/filesystems/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/filesystems/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>filesystems</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#filesystems>filesystems</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=filesystems>filesystems</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>Enumerates mounted filesystems.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>filesystems</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#filesystems>filesystems</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=filesystems>filesystems</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>Enumerates mounted filesystems.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/flatten/index.html b/vql_reference/plugin/flatten/index.html
index 3c8abe41973..e4098ef723a 100644
--- a/vql_reference/plugin/flatten/index.html
+++ b/vql_reference/plugin/flatten/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>flatten :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/flatten/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/flatten/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>flatten</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#flatten>flatten</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=flatten>flatten</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>query</td><td></td><td>StoredQuery (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Flatten the columns in query. If any column repeats then we repeat the entire row once for each item.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>flatten</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#flatten>flatten</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=flatten>flatten</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>query</td><td></td><td>StoredQuery (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Flatten the columns in query. If any column repeats then we repeat the entire row once for each item.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/for/index.html b/vql_reference/plugin/for/index.html
index cbf0a04acda..22483bb3714 100644
--- a/vql_reference/plugin/for/index.html
+++ b/vql_reference/plugin/for/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>for :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/for/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/for/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>for</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#for>for</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=for>for</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>var</td><td>The variable to assign.</td><td>string (required)</td></tr><tr><td>foreach</td><td>The variable to iterate over.</td><td>StoredQuery (required)</td></tr><tr><td>query</td><td>Run this query over the item.</td><td>StoredQuery</td></tr></tbody></table><h3 id=description>Description</h3><p>Iterate over a list.</p><p>DEPRECATED - use foreach() instead.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>for</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#for>for</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=for>for</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>var</td><td>The variable to assign.</td><td>string (required)</td></tr><tr><td>foreach</td><td>The variable to iterate over.</td><td>StoredQuery (required)</td></tr><tr><td>query</td><td>Run this query over the item.</td><td>StoredQuery</td></tr></tbody></table><h3 id=description>Description</h3><p>Iterate over a list.</p><p>DEPRECATED - use foreach() instead.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/foreach/index.html b/vql_reference/plugin/foreach/index.html
index 83458e31665..3665a14ccca 100644
--- a/vql_reference/plugin/foreach/index.html
+++ b/vql_reference/plugin/foreach/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>foreach :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/foreach/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/foreach/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -74,4 +74,4 @@
 much simpler to use.</p><p>If the <code>workers</code> parameter is specified, the plugin will spawn
 this many workers and evaluate the <code>query</code> query in each worker
 concurrently if possible. It is safe to use a large number here
-(say 100) to utilize all available cores.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+(say 100) to utilize all available cores.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/glob/index.html b/vql_reference/plugin/glob/index.html
index 7b859d5680e..7a88db5420f 100644
--- a/vql_reference/plugin/glob/index.html
+++ b/vql_reference/plugin/glob/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>glob :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/glob/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/glob/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -104,4 +104,4 @@
 recurse into it.</p><p>For example consider the following query which searches for pem
 files in all directories other than /proc, /sys or /snap</p><pre><code class=language-vql>SELECT * FROM glob(globs='/**/*.pem',
     recursion_callback=&quot;x=&gt;NOT x.Name =~ '^/(proc|sys|snap)'&quot;)
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/grep/index.html b/vql_reference/plugin/grep/index.html
index 6f3012d7b4c..9f5d5278f47 100644
--- a/vql_reference/plugin/grep/index.html
+++ b/vql_reference/plugin/grep/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>grep :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/grep/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/grep/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>grep</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#grep>grep</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=grep>grep</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>path to open.</td><td>string (required)</td></tr><tr><td>accessor</td><td>An accessor to use.</td><td>string</td></tr><tr><td>keywords</td><td>Keywords to search for.</td><td>list of string (required)</td></tr><tr><td>context</td><td>Extract this many bytes as context around hits.</td><td>int</td></tr></tbody></table><h3 id=description>Description</h3><p>Search a file for keywords.</p><p>DEPRECATED: Use <code>yara()</code> instead.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>grep</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#grep>grep</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=grep>grep</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>path to open.</td><td>string (required)</td></tr><tr><td>accessor</td><td>An accessor to use.</td><td>string</td></tr><tr><td>keywords</td><td>Keywords to search for.</td><td>list of string (required)</td></tr><tr><td>context</td><td>Extract this many bytes as context around hits.</td><td>int</td></tr></tbody></table><h3 id=description>Description</h3><p>Search a file for keywords.</p><p>DEPRECATED: Use <code>yara()</code> instead.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/hash/index.html b/vql_reference/plugin/hash/index.html
index 27f536b3301..ac9f50dd1fe 100644
--- a/vql_reference/plugin/hash/index.html
+++ b/vql_reference/plugin/hash/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>hash :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/hash/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/hash/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>hash</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#hash>hash</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=hash>hash</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>Path to open and hash.</td><td>OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use</td><td>string</td></tr><tr><td>hashselect</td><td>The hash function to use (MD5,SHA1,SHA256)</td><td>list of string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Calculate the hash of a file.</p><p>This function calculates the MD5, SHA1 and SHA256 hashes of the file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Calculate the hash of a file.</p><p>This function calculates the MD5, SHA1 and SHA256 hashes of the file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/http_client/index.html b/vql_reference/plugin/http_client/index.html
index eae366318ae..cbd456b3e88 100644
--- a/vql_reference/plugin/http_client/index.html
+++ b/vql_reference/plugin/http_client/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>http_client :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/http_client/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/http_client/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -112,4 +112,4 @@
          file_bytes + '\r\n--83fcda3640aca670--')
 </code></pre><p>Note how custom headers can be provided using a dict - note also
 how dict keys with special characters in them can be constructed
-using the backtick quoting.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+using the backtick quoting.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/if/index.html b/vql_reference/plugin/if/index.html
index 2ef14acf8e4..10892d6cbbc 100644
--- a/vql_reference/plugin/if/index.html
+++ b/vql_reference/plugin/if/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>if :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/if/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/if/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -73,4 +73,4 @@
 that involve stored queries (i.e. queries stored using the <code>LET</code>
 keyword). These queries will not be evaluated if they are not needed.</p><p>This allows a query to cheaply branch. For example, if a parameter is
 given, then perform hash or upload to the server. See the
-<code>Windows.Search.FileFinder</code> for an example of how <code>if()</code> is used.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<code>Windows.Search.FileFinder</code> for an example of how <code>if()</code> is used.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/index.html b/vql_reference/plugin/index.html
index 75790041ce4..cb0a3835442 100644
--- a/vql_reference/plugin/index.html
+++ b/vql_reference/plugin/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Client Side :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -78,4 +78,4 @@
 of the VQL query - i.e. plugins always follow the <code>FROM</code> keyword,
 while functions (which return a single value instead of a sequence of
 rows) are only present in column specification (e.g. after <code>SELECT</code>)
-or in condition clauses (i.e. after the <code>WHERE</code> keyword).</p></div></div><table><thead><tr><th>Plugin/Function</th><th><span class=vql_type>Type</span></th><th>Description</th></tr></thead><tbody><tr><td><a href=chain>chain</a></td><td><span class=vql_type>Plugin</span></td><td>Chain the output of several queries into the same table</td></tr><tr><td><a href=collect>collect</a></td><td><span class=vql_type>Plugin</span></td><td>Collect artifacts into a local file</td></tr><tr><td><a href=commandline_split>commandline_split</a></td><td><span class=vql_type>Function</span></td><td>Split a commandline into separate components following the windows</td></tr><tr><td><a href=connections>connections</a></td><td><span class=vql_type>Plugin</span></td><td>List all active connections</td></tr><tr><td><a href=crypto_rc4>crypto_rc4</a></td><td><span class=vql_type>Function</span></td><td>Apply rc4 to the string and key</td></tr><tr><td><a href=environ>environ</a></td><td><span class=vql_type>Plugin</span></td><td>The row returned will have all environment variables as</td></tr><tr><td><a href=execve>execve</a></td><td><span class=vql_type>Plugin</span></td><td>This plugin launches an external command and captures its STDERR,</td></tr><tr><td><a href=filesystems>filesystems</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerates mounted filesystems</td></tr><tr><td><a href=flatten>flatten</a></td><td><span class=vql_type>Plugin</span></td><td>Flatten the columns in query</td></tr><tr><td><a href=for>for</a></td><td><span class=vql_type>Plugin</span></td><td>Iterate over a list</td></tr><tr><td><a href=foreach>foreach</a></td><td><span class=vql_type>Plugin</span></td><td>Executes &lsquo;query&rsquo; once for each row in the &lsquo;row&rsquo; query</td></tr><tr><td><a href=glob>glob</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve files based on a list of glob expressions</td></tr><tr><td><a href=grep>grep</a></td><td><span class=vql_type>Function</span></td><td>Search a file for keywords</td></tr><tr><td><a href=hash>hash</a></td><td><span class=vql_type>Function</span></td><td>Calculate the hash of a file</td></tr><tr><td><a href=http_client>http_client</a></td><td><span class=vql_type>Plugin</span></td><td>Make a http request</td></tr><tr><td><a href=if>if</a></td><td><span class=vql_type>Plugin</span></td><td>Conditional execution of query</td></tr><tr><td><a href=info>info</a></td><td><span class=vql_type>Plugin</span></td><td>Get information about the running host</td></tr><tr><td><a href=int>int</a></td><td><span class=vql_type>Function</span></td><td>Truncate to an integer</td></tr><tr><td><a href=ip>ip</a></td><td><span class=vql_type>Function</span></td><td>Format an IP address</td></tr><tr><td><a href=js_get>js_get</a></td><td><span class=vql_type>Function</span></td><td>Get a variable&rsquo;s value from the JS VM</td></tr><tr><td><a href=js_set>js_set</a></td><td><span class=vql_type>Function</span></td><td>Set a variables value in the JS VM</td></tr><tr><td><a href=magic>magic</a></td><td><span class=vql_type>Function</span></td><td>Identify a file using magic rules</td></tr><tr><td><a href=netcat>netcat</a></td><td><span class=vql_type>Plugin</span></td><td>Make a tcp connection and read data from a socket</td></tr><tr><td><a href=netstat>netstat</a></td><td><span class=vql_type>Plugin</span></td><td>Collect network information</td></tr><tr><td><a href=pathspec>pathspec</a></td><td><span class=vql_type>Function</span></td><td>Create a structured path spec to pass to certain accessors</td></tr><tr><td><a href=pipe>pipe</a></td><td><span class=vql_type>Function</span></td><td>A pipe allows plugins that use files to read data from a vql</td></tr><tr><td><a href=profile>profile</a></td><td><span class=vql_type>Plugin</span></td><td>Returns a profile dump from the running process</td></tr><tr><td><a href=pslist>pslist</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerate running processes</td></tr><tr><td><a href=read_file>read_file</a></td><td><span class=vql_type>Plugin</span></td><td>Read files in chunks</td></tr><tr><td><a href=reg_rm_key>reg_rm_key</a></td><td><span class=vql_type>Function</span></td><td>Removes a key and all its values from the registry</td></tr><tr><td><a href=reg_rm_value>reg_rm_value</a></td><td><span class=vql_type>Function</span></td><td>Removes a value in the registry</td></tr><tr><td><a href=reg_set_value>reg_set_value</a></td><td><span class=vql_type>Function</span></td><td>Set a value in the registry</td></tr><tr><td><a href=rm>rm</a></td><td><span class=vql_type>Function</span></td><td>Remove a file from the filesystem using the API</td></tr><tr><td><a href=scope>scope</a></td><td><span class=vql_type>Plugin</span></td><td>The scope plugin returns the current scope as a single row</td></tr><tr><td><a href=sql>sql</a></td><td><span class=vql_type>Plugin</span></td><td>Run queries against sqlite, mysql, and postgres databases</td></tr><tr><td><a href=stat>stat</a></td><td><span class=vql_type>Plugin</span></td><td>Get file information</td></tr><tr><td><a href=switch>switch</a></td><td><span class=vql_type>Plugin</span></td><td>Conditional execution of multiple queries in order</td></tr><tr><td><a href=tempfile>tempfile</a></td><td><span class=vql_type>Function</span></td><td>Create a temporary file and write some data into it</td></tr><tr><td><a href=upload>upload</a></td><td><span class=vql_type>Function</span></td><td>Upload a file to the upload service</td></tr><tr><td><a href=upload>upload</a></td><td><span class=vql_type>Plugin</span></td><td>Upload files to the server</td></tr><tr><td><a href=upload_gcs>upload_gcs</a></td><td><span class=vql_type>Function</span></td><td>Upload files to GCS</td></tr><tr><td><a href=upload_s3>upload_s3</a></td><td><span class=vql_type>Function</span></td><td>Upload files to S3</td></tr><tr><td><a href=whoami>whoami</a></td><td><span class=vql_type>Function</span></td><td>Returns the username that is running the query</td></tr><tr><td><a href=write_csv>write_csv</a></td><td><span class=vql_type>Plugin</span></td><td>Write a query into a CSV file</td></tr><tr><td><a href=yara>yara</a></td><td><span class=vql_type>Plugin</span></td><td>Scan files using yara rules</td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+or in condition clauses (i.e. after the <code>WHERE</code> keyword).</p></div></div><table><thead><tr><th>Plugin/Function</th><th><span class=vql_type>Type</span></th><th>Description</th></tr></thead><tbody><tr><td><a href=chain>chain</a></td><td><span class=vql_type>Plugin</span></td><td>Chain the output of several queries into the same table</td></tr><tr><td><a href=collect>collect</a></td><td><span class=vql_type>Plugin</span></td><td>Collect artifacts into a local file</td></tr><tr><td><a href=commandline_split>commandline_split</a></td><td><span class=vql_type>Function</span></td><td>Split a commandline into separate components following the windows</td></tr><tr><td><a href=connections>connections</a></td><td><span class=vql_type>Plugin</span></td><td>List all active connections</td></tr><tr><td><a href=crypto_rc4>crypto_rc4</a></td><td><span class=vql_type>Function</span></td><td>Apply rc4 to the string and key</td></tr><tr><td><a href=environ>environ</a></td><td><span class=vql_type>Plugin</span></td><td>The row returned will have all environment variables as</td></tr><tr><td><a href=execve>execve</a></td><td><span class=vql_type>Plugin</span></td><td>This plugin launches an external command and captures its STDERR,</td></tr><tr><td><a href=filesystems>filesystems</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerates mounted filesystems</td></tr><tr><td><a href=flatten>flatten</a></td><td><span class=vql_type>Plugin</span></td><td>Flatten the columns in query</td></tr><tr><td><a href=for>for</a></td><td><span class=vql_type>Plugin</span></td><td>Iterate over a list</td></tr><tr><td><a href=foreach>foreach</a></td><td><span class=vql_type>Plugin</span></td><td>Executes &lsquo;query&rsquo; once for each row in the &lsquo;row&rsquo; query</td></tr><tr><td><a href=glob>glob</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve files based on a list of glob expressions</td></tr><tr><td><a href=grep>grep</a></td><td><span class=vql_type>Function</span></td><td>Search a file for keywords</td></tr><tr><td><a href=hash>hash</a></td><td><span class=vql_type>Function</span></td><td>Calculate the hash of a file</td></tr><tr><td><a href=http_client>http_client</a></td><td><span class=vql_type>Plugin</span></td><td>Make a http request</td></tr><tr><td><a href=if>if</a></td><td><span class=vql_type>Plugin</span></td><td>Conditional execution of query</td></tr><tr><td><a href=info>info</a></td><td><span class=vql_type>Plugin</span></td><td>Get information about the running host</td></tr><tr><td><a href=int>int</a></td><td><span class=vql_type>Function</span></td><td>Truncate to an integer</td></tr><tr><td><a href=ip>ip</a></td><td><span class=vql_type>Function</span></td><td>Format an IP address</td></tr><tr><td><a href=js_get>js_get</a></td><td><span class=vql_type>Function</span></td><td>Get a variable&rsquo;s value from the JS VM</td></tr><tr><td><a href=js_set>js_set</a></td><td><span class=vql_type>Function</span></td><td>Set a variables value in the JS VM</td></tr><tr><td><a href=magic>magic</a></td><td><span class=vql_type>Function</span></td><td>Identify a file using magic rules</td></tr><tr><td><a href=netcat>netcat</a></td><td><span class=vql_type>Plugin</span></td><td>Make a tcp connection and read data from a socket</td></tr><tr><td><a href=netstat>netstat</a></td><td><span class=vql_type>Plugin</span></td><td>Collect network information</td></tr><tr><td><a href=pathspec>pathspec</a></td><td><span class=vql_type>Function</span></td><td>Create a structured path spec to pass to certain accessors</td></tr><tr><td><a href=pipe>pipe</a></td><td><span class=vql_type>Function</span></td><td>A pipe allows plugins that use files to read data from a vql</td></tr><tr><td><a href=profile>profile</a></td><td><span class=vql_type>Plugin</span></td><td>Returns a profile dump from the running process</td></tr><tr><td><a href=pslist>pslist</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerate running processes</td></tr><tr><td><a href=read_file>read_file</a></td><td><span class=vql_type>Plugin</span></td><td>Read files in chunks</td></tr><tr><td><a href=reg_rm_key>reg_rm_key</a></td><td><span class=vql_type>Function</span></td><td>Removes a key and all its values from the registry</td></tr><tr><td><a href=reg_rm_value>reg_rm_value</a></td><td><span class=vql_type>Function</span></td><td>Removes a value in the registry</td></tr><tr><td><a href=reg_set_value>reg_set_value</a></td><td><span class=vql_type>Function</span></td><td>Set a value in the registry</td></tr><tr><td><a href=rm>rm</a></td><td><span class=vql_type>Function</span></td><td>Remove a file from the filesystem using the API</td></tr><tr><td><a href=scope>scope</a></td><td><span class=vql_type>Plugin</span></td><td>The scope plugin returns the current scope as a single row</td></tr><tr><td><a href=sql>sql</a></td><td><span class=vql_type>Plugin</span></td><td>Run queries against sqlite, mysql, and postgres databases</td></tr><tr><td><a href=stat>stat</a></td><td><span class=vql_type>Plugin</span></td><td>Get file information</td></tr><tr><td><a href=switch>switch</a></td><td><span class=vql_type>Plugin</span></td><td>Conditional execution of multiple queries in order</td></tr><tr><td><a href=tempfile>tempfile</a></td><td><span class=vql_type>Function</span></td><td>Create a temporary file and write some data into it</td></tr><tr><td><a href=upload>upload</a></td><td><span class=vql_type>Function</span></td><td>Upload a file to the upload service</td></tr><tr><td><a href=upload>upload</a></td><td><span class=vql_type>Plugin</span></td><td>Upload files to the server</td></tr><tr><td><a href=upload_gcs>upload_gcs</a></td><td><span class=vql_type>Function</span></td><td>Upload files to GCS</td></tr><tr><td><a href=upload_s3>upload_s3</a></td><td><span class=vql_type>Function</span></td><td>Upload files to S3</td></tr><tr><td><a href=whoami>whoami</a></td><td><span class=vql_type>Function</span></td><td>Returns the username that is running the query</td></tr><tr><td><a href=write_csv>write_csv</a></td><td><span class=vql_type>Plugin</span></td><td>Write a query into a CSV file</td></tr><tr><td><a href=yara>yara</a></td><td><span class=vql_type>Plugin</span></td><td>Scan files using yara rules</td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/info/index.html b/vql_reference/plugin/info/index.html
index 858cef790d6..169e514c716 100644
--- a/vql_reference/plugin/info/index.html
+++ b/vql_reference/plugin/info/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>info :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/info/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/info/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -72,4 +72,4 @@
 <i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Get information about the running host.</p><p>This plugin returns a single row with information about the current
 system. The information includes the Hostname, Uptime, OS, Platform
 etc.</p><p>This plugin is very useful in preconditions as it restricts a query to
-certain OS or versions.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+certain OS or versions.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/int/index.html b/vql_reference/plugin/int/index.html
index f3e15693827..71451ee9f36 100644
--- a/vql_reference/plugin/int/index.html
+++ b/vql_reference/plugin/int/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>int :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/int/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/int/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>int</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#int>int</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=int>int</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>int</td><td>The integer to round</td><td>Any</td></tr></tbody></table><h3 id=description>Description</h3><p>Truncate to an integer.</p><p>If provided a string, the function will try to parse it into an integer.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>int</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#int>int</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=int>int</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>int</td><td>The integer to round</td><td>Any</td></tr></tbody></table><h3 id=description>Description</h3><p>Truncate to an integer.</p><p>If provided a string, the function will try to parse it into an integer.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/ip/index.html b/vql_reference/plugin/ip/index.html
index e0a5edb4a36..3cc4261f23d 100644
--- a/vql_reference/plugin/ip/index.html
+++ b/vql_reference/plugin/ip/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>ip :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/ip/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/ip/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -73,4 +73,4 @@
 print it in a human readable way.</p><p>This currently does not support IPv6 addresses. Those are usually
 encoded as an array of 8 bytes which makes it easy to format using the
 <code>format()</code> function:</p><pre><code class=language-vql>  format(format=&quot;%x:%x:%x:%x:%x:%x:%x:%x&quot;, value)
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/js_get/index.html b/vql_reference/plugin/js_get/index.html
index 0b8de97e245..a98db3010f6 100644
--- a/vql_reference/plugin/js_get/index.html
+++ b/vql_reference/plugin/js_get/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>js_get :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/js_get/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/js_get/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>js_get</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#js_get>js_get</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=js_get>js_get</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>var</td><td>The variable to get from the JS VM.</td><td>string (required)</td></tr><tr><td>key</td><td>If set use this key to cache the JS VM.</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Get a variable&rsquo;s value from the JS VM.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>js_get</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#js_get>js_get</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=js_get>js_get</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>var</td><td>The variable to get from the JS VM.</td><td>string (required)</td></tr><tr><td>key</td><td>If set use this key to cache the JS VM.</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Get a variable&rsquo;s value from the JS VM.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/js_set/index.html b/vql_reference/plugin/js_set/index.html
index 16b34867f87..64875bd572d 100644
--- a/vql_reference/plugin/js_set/index.html
+++ b/vql_reference/plugin/js_set/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>js_set :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526435 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526435 rel=stylesheet><link href=/css/featherlight.min.css?1699526435 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526435 rel=stylesheet><link href=/css/auto-complete.css?1699526435 rel=stylesheet><link href=/css/theme.css?1699526435 rel=stylesheet><link href=/css/tabs.css?1699526435 rel=stylesheet><link href=/css/hugo-theme.css?1699526435 rel=stylesheet><link href=/css/theme-mine.css?1699526435 rel=stylesheet><link href=/css/dark.css?1699526435 rel=stylesheet><link href=/css/syntax.css?1699526435 rel=stylesheet><link href=/css/light.css?1699526435 rel=stylesheet><link href=/css/hljs.css?1699526435 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526435 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526435></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/js_set/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/js_set/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>js_set</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#js_set>js_set</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=js_set>js_set</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>var</td><td>The variable to set inside the JS VM.</td><td>string (required)</td></tr><tr><td>value</td><td>The value to set inside the VM.</td><td>Any (required)</td></tr><tr><td>key</td><td>If set use this key to cache the JS VM.</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Set a variables value in the JS VM.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526435></script><script src=/js/perfect-scrollbar.min.js?1699526435></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526435></script><script src=/js/jquery.sticky.js?1699526435></script><script src=/js/featherlight.min.js?1699526435></script><script src=/js/highlight.min.js?1699526435></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526435></script><script src=/js/learn.js?1699526435></script><script src=/js/hugo-learn.js?1699526435></script></body></html>
\ No newline at end of file
+<span class=links>js_set</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#js_set>js_set</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=js_set>js_set</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>var</td><td>The variable to set inside the JS VM.</td><td>string (required)</td></tr><tr><td>value</td><td>The value to set inside the VM.</td><td>Any (required)</td></tr><tr><td>key</td><td>If set use this key to cache the JS VM.</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Set a variables value in the JS VM.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/magic/index.html b/vql_reference/plugin/magic/index.html
index 67f6d3fccf1..8a8672f3ec9 100644
--- a/vql_reference/plugin/magic/index.html
+++ b/vql_reference/plugin/magic/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>magic :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/magic/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/magic/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -86,4 +86,4 @@
 causes the file to be opened. If you have on-access scanning such
 as Windows Defender &ldquo;Realtime monitoring&rdquo;, applying magic() on
 many files (e.g. in a glob) may result in substantial load on the
-endpoint.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+endpoint.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/netcat/index.html b/vql_reference/plugin/netcat/index.html
index a91231f9d24..5e923465eb1 100644
--- a/vql_reference/plugin/netcat/index.html
+++ b/vql_reference/plugin/netcat/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>netcat :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/netcat/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/netcat/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>netcat</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#netcat>netcat</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=netcat>netcat</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>address</td><td>The address to connect to (can be a file in case of a unix domain socket)</td><td>string (required)</td></tr><tr><td>type</td><td>Can be tcp or unix (default TCP)</td><td>string</td></tr><tr><td>send</td><td>Data to send before reading</td><td>string</td></tr><tr><td>sep</td><td>The separator that will be used to split (default - line feed)</td><td>string</td></tr><tr><td>chunk_size</td><td>Read input with this chunk size (default 64kb)</td><td>int</td></tr><tr><td>retry</td><td>Seconds to wait before retry - default 0 - do not retry</td><td>int</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">COLLECT_SERVER</i></p><h3 id=description>Description</h3><p>Make a tcp connection and read data from a socket.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">COLLECT_SERVER</i></p><h3 id=description>Description</h3><p>Make a tcp connection and read data from a socket.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/netstat/index.html b/vql_reference/plugin/netstat/index.html
index 597319373d5..175524b6f24 100644
--- a/vql_reference/plugin/netstat/index.html
+++ b/vql_reference/plugin/netstat/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>netstat :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/netstat/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/netstat/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>netstat</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#netstat>netstat</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=netstat>netstat</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Collect network information.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Collect network information.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/pathspec/index.html b/vql_reference/plugin/pathspec/index.html
index 352f1e07979..0dc2948cb00 100644
--- a/vql_reference/plugin/pathspec/index.html
+++ b/vql_reference/plugin/pathspec/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>pathspec :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/pathspec/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/pathspec/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>pathspec</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#pathspec>pathspec</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=pathspec>pathspec</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>DelegateAccessor</td><td>An accessor to use.</td><td>string</td></tr><tr><td>DelegatePath</td><td>A delegate to pass to the accessor.</td><td>string</td></tr><tr><td>Path</td><td>A path to open.</td><td>Any</td></tr><tr><td>parse</td><td>Alternatively parse the pathspec from this string.</td><td>string</td></tr><tr><td>path_type</td><td>Type of path this is (windows,linux,registry,ntfs).</td><td>string</td></tr><tr><td>accessor</td><td>The accessor to use to parse the path with</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Create a structured path spec to pass to certain accessors.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>pathspec</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#pathspec>pathspec</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=pathspec>pathspec</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>DelegateAccessor</td><td>An accessor to use.</td><td>string</td></tr><tr><td>DelegatePath</td><td>A delegate to pass to the accessor.</td><td>string</td></tr><tr><td>Path</td><td>A path to open.</td><td>Any</td></tr><tr><td>parse</td><td>Alternatively parse the pathspec from this string.</td><td>string</td></tr><tr><td>path_type</td><td>Type of path this is (windows,linux,registry,ntfs).</td><td>string</td></tr><tr><td>accessor</td><td>The accessor to use to parse the path with</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Create a structured path spec to pass to certain accessors.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/pipe/index.html b/vql_reference/plugin/pipe/index.html
index a8d8f6b35fc..5587b7a5892 100644
--- a/vql_reference/plugin/pipe/index.html
+++ b/vql_reference/plugin/pipe/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>pipe :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/pipe/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/pipe/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -84,4 +84,4 @@
 SELECT * FROM parse_csv(
    columns=Columns, separator=&quot; &quot;,
    filename=&quot;MyPipe&quot;, accessor=&quot;pipe&quot;)
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/profile/index.html b/vql_reference/plugin/profile/index.html
index ce83777737b..6b3e7d1da59 100644
--- a/vql_reference/plugin/profile/index.html
+++ b/vql_reference/plugin/profile/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>profile :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/profile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/profile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>profile</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#profile>profile</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=profile>profile</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>allocs</td><td>A sampling of all past memory allocations</td><td>bool</td></tr><tr><td>block</td><td>Stack traces that led to blocking on synchronization primitives</td><td>bool</td></tr><tr><td>goroutine</td><td>Stack traces of all current goroutines</td><td>bool</td></tr><tr><td>heap</td><td>A sampling of memory allocations of live objects.</td><td>bool</td></tr><tr><td>mutex</td><td>Stack traces of holders of contended mutexes</td><td>bool</td></tr><tr><td>profile</td><td>CPU profile.</td><td>bool</td></tr><tr><td>trace</td><td>CPU trace.</td><td>bool</td></tr><tr><td>debug</td><td>Debug level</td><td>int64</td></tr><tr><td>logs</td><td>Recent logs</td><td>bool</td></tr><tr><td>queries</td><td>Recent Queries run</td><td>bool</td></tr><tr><td>metrics</td><td>Collect metrics</td><td>bool</td></tr><tr><td>duration</td><td>Duration of samples (default 30 sec)</td><td>int64</td></tr><tr><td>type</td><td>The type of profile (this is a regex of debug output types that will be shown).</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Returns a profile dump from the running process.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Returns a profile dump from the running process.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/pslist/index.html b/vql_reference/plugin/pslist/index.html
index 6b565acbdab..83924937481 100644
--- a/vql_reference/plugin/pslist/index.html
+++ b/vql_reference/plugin/pslist/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>pslist :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/pslist/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/pslist/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -72,4 +72,4 @@
 <i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Enumerate running processes.</p><p>When specifying the pid this operation is much faster so if you are
 interested in specific processes, the pid should be
 specified. Otherwise, the plugin returns all processes one on each
-row.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+row.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/read_file/index.html b/vql_reference/plugin/read_file/index.html
index 655641d26d3..d72712683dd 100644
--- a/vql_reference/plugin/read_file/index.html
+++ b/vql_reference/plugin/read_file/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>read_file :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/read_file/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/read_file/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>read_file</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#read_file>read_file</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=read_file>read_file</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>chunk</td><td>length of each chunk to read from the file.</td><td>int</td></tr><tr><td>max_length</td><td>Max length of the file to read.</td><td>int</td></tr><tr><td>filenames</td><td>One or more files to open.</td><td>list of OSPath (required)</td></tr><tr><td>accessor</td><td>An accessor to use.</td><td>string</td></tr></tbody></table><p>Required Permissions:
 <i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Read files in chunks.</p><p>This plugin reads a file in chunks and returns each chunks as a separate row.</p><p>It is useful when we want to report file contents for small files like
-configuration files etc.</p><p>The returned row contains the following columns: data, offset, filename</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+configuration files etc.</p><p>The returned row contains the following columns: data, offset, filename</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/reg_rm_key/index.html b/vql_reference/plugin/reg_rm_key/index.html
index 7c64fc80bc6..b2627445391 100644
--- a/vql_reference/plugin/reg_rm_key/index.html
+++ b/vql_reference/plugin/reg_rm_key/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>reg_rm_key :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/reg_rm_key/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/reg_rm_key/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>reg_rm_key</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#reg_rm_key>reg_rm_key</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=reg_rm_key>reg_rm_key</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>Registry key path.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Removes a key and all its values from the registry.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>reg_rm_key</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#reg_rm_key>reg_rm_key</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=reg_rm_key>reg_rm_key</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>Registry key path.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Removes a key and all its values from the registry.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/reg_rm_value/index.html b/vql_reference/plugin/reg_rm_value/index.html
index c183c05902e..a2b2fa1c3af 100644
--- a/vql_reference/plugin/reg_rm_value/index.html
+++ b/vql_reference/plugin/reg_rm_value/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>reg_rm_value :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/reg_rm_value/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/reg_rm_value/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>reg_rm_value</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#reg_rm_value>reg_rm_value</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=reg_rm_value>reg_rm_value</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>Registry value path.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Removes a value in the registry.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>reg_rm_value</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#reg_rm_value>reg_rm_value</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=reg_rm_value>reg_rm_value</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>Registry value path.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Removes a value in the registry.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/reg_set_value/index.html b/vql_reference/plugin/reg_set_value/index.html
index 5688594d576..a9ec7234b69 100644
--- a/vql_reference/plugin/reg_set_value/index.html
+++ b/vql_reference/plugin/reg_set_value/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>reg_set_value :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/reg_set_value/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/reg_set_value/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>reg_set_value</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#reg_set_value>reg_set_value</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=reg_set_value>reg_set_value</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>Registry value path.</td><td>string (required)</td></tr><tr><td>value</td><td>Value to set</td><td>LazyExpr (required)</td></tr><tr><td>type</td><td>Type to set (SZ, DWORD, QWORD)</td><td>string (required)</td></tr><tr><td>create</td><td>Set to create missing intermediate keys</td><td>bool</td></tr></tbody></table><h3 id=description>Description</h3><p>Set a value in the registry.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>reg_set_value</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#reg_set_value>reg_set_value</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=reg_set_value>reg_set_value</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>Registry value path.</td><td>string (required)</td></tr><tr><td>value</td><td>Value to set</td><td>LazyExpr (required)</td></tr><tr><td>type</td><td>Type to set (SZ, DWORD, QWORD)</td><td>string (required)</td></tr><tr><td>create</td><td>Set to create missing intermediate keys</td><td>bool</td></tr></tbody></table><h3 id=description>Description</h3><p>Set a value in the registry.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/rm/index.html b/vql_reference/plugin/rm/index.html
index 4d22fbd978f..68849868b7c 100644
--- a/vql_reference/plugin/rm/index.html
+++ b/vql_reference/plugin/rm/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>rm :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/rm/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/rm/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>rm</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#rm>rm</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=rm>rm</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>filename</td><td>Filename to remove.</td><td>string (required)</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_WRITE</i></p><h3 id=description>Description</h3><p>Remove a file from the filesystem using the API.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_WRITE</i></p><h3 id=description>Description</h3><p>Remove a file from the filesystem using the API.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/scope/index.html b/vql_reference/plugin/scope/index.html
index 2b6ceb2bb33..6cd38133c2c 100644
--- a/vql_reference/plugin/scope/index.html
+++ b/vql_reference/plugin/scope/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>scope :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/scope/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/scope/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>scope</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#scope>scope</a><ul><li><a href=#description>Description</a></li><li><a href=#example>Example</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=scope>scope</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>The scope plugin returns the current scope as a single row.</p><p>The main use for this plugin is as a NOOP plugin in those cases we
 dont want to actually run anything.</p><h3 id=example>Example</h3><pre><code class=language-vql>SELECT 1+1 As Two FROM scope()
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/sql/index.html b/vql_reference/plugin/sql/index.html
index cb18437007a..535b86797f5 100644
--- a/vql_reference/plugin/sql/index.html
+++ b/vql_reference/plugin/sql/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>sql :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/sql/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/sql/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>sql</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#sql>sql</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=sql>sql</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>driver</td><td>sqlite, mysql,or postgres</td><td>string (required)</td></tr><tr><td>connstring</td><td>SQL Connection String</td><td>string</td></tr><tr><td>file</td><td>Required if using sqlite driver</td><td>OSPath</td></tr><tr><td>accessor</td><td>The accessor to use if using sqlite</td><td>string</td></tr><tr><td>query</td><td></td><td>string (required)</td></tr><tr><td>args</td><td></td><td>Any</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Run queries against sqlite, mysql, and postgres databases</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Run queries against sqlite, mysql, and postgres databases</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/stat/index.html b/vql_reference/plugin/stat/index.html
index 029bf79a9f5..366974f818d 100644
--- a/vql_reference/plugin/stat/index.html
+++ b/vql_reference/plugin/stat/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>stat :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/stat/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/stat/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>stat</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#stat>stat</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=stat>stat</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>filename</td><td>One or more files to open.</td><td>OSPath (required)</td></tr><tr><td>accessor</td><td>An accessor to use.</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Get file information. Unlike glob() this does not support wildcards.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Get file information. Unlike glob() this does not support wildcards.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/switch/index.html b/vql_reference/plugin/switch/index.html
index c2c9b19eb22..06c4b86048f 100644
--- a/vql_reference/plugin/switch/index.html
+++ b/vql_reference/plugin/switch/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>switch :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/switch/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/switch/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>switch</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#switch>switch</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=switch>switch</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>Conditional execution of multiple queries in order</p><p>Executes each query in order. If a query returns any rows, those
-are emitted. Any further queries are ignored.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+are emitted. Any further queries are ignored.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/tempfile/index.html b/vql_reference/plugin/tempfile/index.html
index c4c99e5383b..980acebe49f 100644
--- a/vql_reference/plugin/tempfile/index.html
+++ b/vql_reference/plugin/tempfile/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>tempfile :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/tempfile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/tempfile/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>tempfile</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#tempfile>tempfile</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=tempfile>tempfile</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>data</td><td>Data to write in the tempfile.</td><td>list of string</td></tr><tr><td>extension</td><td>An extension to place in the tempfile.</td><td>string</td></tr><tr><td>permissions</td><td>Required permissions (e.g. &lsquo;x&rsquo;).</td><td>string</td></tr><tr><td>remove_last</td><td>If set we delay removal as much as possible.</td><td>bool</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_WRITE</i></p><h3 id=description>Description</h3><p>Create a temporary file and write some data into it.</p><p>The file will be automatically removed when the query completes.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_WRITE</i></p><h3 id=description>Description</h3><p>Create a temporary file and write some data into it.</p><p>The file will be automatically removed when the query completes.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/upload/index.html b/vql_reference/plugin/upload/index.html
index be1c8e04465..f59c5a18291 100644
--- a/vql_reference/plugin/upload/index.html
+++ b/vql_reference/plugin/upload/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>upload :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -74,4 +74,4 @@
 <code>--dump_dir</code> path or added to the triage evidence container.</p><div class=vql_item></div><h2 id=upload-1>upload</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>files</td><td>A list of files to upload</td><td>list of string (required)</td></tr><tr><td>accessor</td><td>The accessor to use</td><td>string</td></tr><tr><td>mtime</td><td>Modified time to record</td><td>Any</td></tr></tbody></table><h3 id=description-1>Description</h3><p>Upload files to the server.</p><p>This plugin uploads the specified file to the server. If Velociraptor
 is run locally the file will be copied to the <code>--dump_dir</code> path or
 added to the triage evidence container.</p><p>This functionality is also available using the upload() function which
-might be somewhat easier to use.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+might be somewhat easier to use.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/upload_gcs/index.html b/vql_reference/plugin/upload_gcs/index.html
index 84db5ad7cf0..02d44e06179 100644
--- a/vql_reference/plugin/upload_gcs/index.html
+++ b/vql_reference/plugin/upload_gcs/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>upload_gcs :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/upload_gcs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/upload_gcs/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>upload_gcs</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#upload_gcs>upload_gcs</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=upload_gcs>upload_gcs</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>file</td><td>The file to upload</td><td>OSPath (required)</td></tr><tr><td>name</td><td>The name of the file that should be stored on the server</td><td>string</td></tr><tr><td>accessor</td><td>The accessor to use</td><td>string</td></tr><tr><td>bucket</td><td>The bucket to upload to</td><td>string (required)</td></tr><tr><td>project</td><td>The project to upload to</td><td>string (required)</td></tr><tr><td>credentials</td><td>The credentials to use</td><td>string (required)</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Upload files to GCS.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Upload files to GCS.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/upload_s3/index.html b/vql_reference/plugin/upload_s3/index.html
index 344b6c8e404..17ce41c8e9c 100644
--- a/vql_reference/plugin/upload_s3/index.html
+++ b/vql_reference/plugin/upload_s3/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>upload_s3 :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/upload_s3/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/upload_s3/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>upload_s3</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#upload_s3>upload_s3</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=upload_s3>upload_s3</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>file</td><td>The file to upload</td><td>OSPath (required)</td></tr><tr><td>name</td><td>The name of the file that should be stored on the server</td><td>string</td></tr><tr><td>accessor</td><td>The accessor to use</td><td>string</td></tr><tr><td>bucket</td><td>The bucket to upload to</td><td>string (required)</td></tr><tr><td>region</td><td>The region the bucket is in</td><td>string (required)</td></tr><tr><td>credentialskey</td><td>The AWS key credentials to use</td><td>string</td></tr><tr><td>credentialssecret</td><td>The AWS secret credentials to use</td><td>string</td></tr><tr><td>endpoint</td><td>The Endpoint to use</td><td>string</td></tr><tr><td>serversideencryption</td><td>The server side encryption method to use</td><td>string</td></tr><tr><td>kmsencryptionkey</td><td>The server side KMS key to use</td><td>string</td></tr><tr><td>s3uploadroot</td><td>Prefix for the S3 object</td><td>string</td></tr><tr><td>noverifycert</td><td>Skip TLS Verification (deprecated in favor of SkipVerify)</td><td>bool</td></tr><tr><td>skip_verify</td><td>Skip TLS Verification</td><td>bool</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Upload files to S3.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Upload files to S3.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/whoami/index.html b/vql_reference/plugin/whoami/index.html
index c8f07c1be3c..cde67edb09c 100644
--- a/vql_reference/plugin/whoami/index.html
+++ b/vql_reference/plugin/whoami/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>whoami :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/whoami/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/whoami/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>whoami</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#whoami>whoami</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=whoami>whoami</h2><p><span class='vql_type pull-right page-header'>Function</span></p><h3 id=description>Description</h3><p>Returns the username that is running the query.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>whoami</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#whoami>whoami</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=whoami>whoami</h2><p><span class='vql_type pull-right page-header'>Function</span></p><h3 id=description>Description</h3><p>Returns the username that is running the query.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/write_csv/index.html b/vql_reference/plugin/write_csv/index.html
index a1e2bfc958c..126c68d7b10 100644
--- a/vql_reference/plugin/write_csv/index.html
+++ b/vql_reference/plugin/write_csv/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>write_csv :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/write_csv/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/write_csv/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>write_csv</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#write_csv>write_csv</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=write_csv>write_csv</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>filename</td><td>CSV files to open</td><td>OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use</td><td>string</td></tr><tr><td>query</td><td>query to write into the file.</td><td>StoredQuery (required)</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_WRITE</i></p><h3 id=description>Description</h3><p>Write a query into a CSV file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_WRITE</i></p><h3 id=description>Description</h3><p>Write a query into a CSV file.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/plugin/yara/index.html b/vql_reference/plugin/yara/index.html
index d7712d1c027..2b33aabd92d 100644
--- a/vql_reference/plugin/yara/index.html
+++ b/vql_reference/plugin/yara/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>yara :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/yara/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/plugin/yara/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -113,4 +113,4 @@
 rules and verify that they will work with Velociraptor&rsquo;s yara
 engine. The tool will automatically remove rules that are
 incompatible with Velociraptor and reduce the size of the rules by
-removing metadata and extra fluff.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+removing metadata and extra fluff.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/add_client_monitoring/index.html b/vql_reference/server/add_client_monitoring/index.html
index ec22585bd2f..2c3aa7d08df 100644
--- a/vql_reference/server/add_client_monitoring/index.html
+++ b/vql_reference/server/add_client_monitoring/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>add_client_monitoring :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/add_client_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/add_client_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>add_client_monitoring</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#add_client_monitoring>add_client_monitoring</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=add_client_monitoring>add_client_monitoring</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>artifact</td><td>The name of the artifact to add</td><td>string (required)</td></tr><tr><td>parameters</td><td>A dict of artifact parameters</td><td>LazyExpr</td></tr><tr><td>label</td><td>Add this artifact to this label group (default all)</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">COLLECT_CLIENT</i></p><h3 id=description>Description</h3><p>Adds a new artifact to the client monitoring table.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">COLLECT_CLIENT</i></p><h3 id=description>Description</h3><p>Adds a new artifact to the client monitoring table.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/add_server_monitoring/index.html b/vql_reference/server/add_server_monitoring/index.html
index 567813933d3..f29cbaec749 100644
--- a/vql_reference/server/add_server_monitoring/index.html
+++ b/vql_reference/server/add_server_monitoring/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>add_server_monitoring :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/add_server_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/add_server_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>add_server_monitoring</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#add_server_monitoring>add_server_monitoring</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=add_server_monitoring>add_server_monitoring</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>artifact</td><td>The name of the artifact to add</td><td>string (required)</td></tr><tr><td>parameters</td><td>A dict of artifact parameters</td><td>LazyExpr</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">COLLECT_SERVER</i></p><h3 id=description>Description</h3><p>Adds a new artifact to the server monitoring table.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">COLLECT_SERVER</i></p><h3 id=description>Description</h3><p>Adds a new artifact to the server monitoring table.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/artifact_definitions/index.html b/vql_reference/server/artifact_definitions/index.html
index 8b776f7c9c7..50422d4b731 100644
--- a/vql_reference/server/artifact_definitions/index.html
+++ b/vql_reference/server/artifact_definitions/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>artifact_definitions :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/artifact_definitions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/artifact_definitions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>artifact_definitions</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#artifact_definitions>artifact_definitions</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=artifact_definitions>artifact_definitions</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>names</td><td>Artifact definitions to dump</td><td>list of string</td></tr><tr><td>deps</td><td>If true includes all dependencies as well.</td><td>bool</td></tr><tr><td>sanitize</td><td>If true we remove extra metadata.</td><td>bool</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Dump artifact definitions from the internal repository.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Dump artifact definitions from the internal repository.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/artifact_delete/index.html b/vql_reference/server/artifact_delete/index.html
index b14a5867743..d8195834b50 100644
--- a/vql_reference/server/artifact_delete/index.html
+++ b/vql_reference/server/artifact_delete/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>artifact_delete :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/artifact_delete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/artifact_delete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>artifact_delete</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#artifact_delete>artifact_delete</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=artifact_delete>artifact_delete</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>name</td><td>The Artifact to delete</td><td>string</td></tr></tbody></table><p>Required Permissions:
 <i class="linkcolour label pull-right label-success">ARTIFACT_WRITER</i>
-<i class="linkcolour label pull-right label-success">SERVER_ARTIFACT_WRITER</i></p><h3 id=description>Description</h3><p>Deletes an artifact from the global repository.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">SERVER_ARTIFACT_WRITER</i></p><h3 id=description>Description</h3><p>Deletes an artifact from the global repository.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/artifact_set/index.html b/vql_reference/server/artifact_set/index.html
index bc3ef6fa76e..1a25c83af69 100644
--- a/vql_reference/server/artifact_set/index.html
+++ b/vql_reference/server/artifact_set/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>artifact_set :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/artifact_set/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/artifact_set/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>artifact_set</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#artifact_set>artifact_set</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=artifact_set>artifact_set</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>definition</td><td>Artifact definition in YAML</td><td>string</td></tr><tr><td>prefix</td><td>Required name prefix</td><td>string</td></tr></tbody></table><p>Required Permissions:
 <i class="linkcolour label pull-right label-success">ARTIFACT_WRITER</i>
-<i class="linkcolour label pull-right label-success">SERVER_ARTIFACT_WRITER</i></p><h3 id=description>Description</h3><p>Sets an artifact into the global repository.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">SERVER_ARTIFACT_WRITER</i></p><h3 id=description>Description</h3><p>Sets an artifact into the global repository.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/cancel_flow/index.html b/vql_reference/server/cancel_flow/index.html
index e5f12f0e606..b745652a77b 100644
--- a/vql_reference/server/cancel_flow/index.html
+++ b/vql_reference/server/cancel_flow/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>cancel_flow :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/cancel_flow/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/cancel_flow/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -72,4 +72,4 @@
 <i class="linkcolour label pull-right label-success">COLLECT_SERVER</i>
 <i class="linkcolour label pull-right label-success">COLLECT_CLIENT</i></p><h3 id=description>Description</h3><p>Cancels the flow.</p><p>This sends the client an immediate cancellation message and stops
 the flow. It also removes any outstanding requests for the client
-if there are any.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+if there are any.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/cidr_contains/index.html b/vql_reference/server/cidr_contains/index.html
index 9ca96bedd11..a9e7a69fb96 100644
--- a/vql_reference/server/cidr_contains/index.html
+++ b/vql_reference/server/cidr_contains/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>cidr_contains :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/cidr_contains/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/cidr_contains/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -72,4 +72,4 @@
 networks.</p><pre><code class=language-vql>SELECT cidr_contains(ip=&quot;192.168.0.132&quot;, ranges=[
     &quot;192.168.0.0/24&quot;, &quot;127.0.0.1/8&quot;])
 FROM scope()
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/client_delete/index.html b/vql_reference/server/client_delete/index.html
index aef85541340..da7e61c1f96 100644
--- a/vql_reference/server/client_delete/index.html
+++ b/vql_reference/server/client_delete/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>client_delete :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/client_delete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/client_delete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>client_delete</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#client_delete>client_delete</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=client_delete>client_delete</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>client_id</td><td></td><td>string (required)</td></tr><tr><td>really_do_it</td><td></td><td>bool</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">DELETE_RESULTS</i></p><h3 id=description>Description</h3><p>Delete all information related to a client from the filestore.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">DELETE_RESULTS</i></p><h3 id=description>Description</h3><p>Delete all information related to a client from the filestore.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/client_info/index.html b/vql_reference/server/client_info/index.html
index 5410e2701aa..05779ed6e40 100644
--- a/vql_reference/server/client_info/index.html
+++ b/vql_reference/server/client_info/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>client_info :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/client_info/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/client_info/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -73,4 +73,4 @@
 data store, such as its hostname, OS etc.</p><p>This information is refreshed each time the <code>Generic.Client.Info</code>
 artifact is collected from the endpoint so it can be out of
 date. This process is called &ldquo;interrogation&rdquo; of the endpoint.</p><p>You can refresh the entire fleet&rsquo;s datastore by scheduling a
-<code>Generic.Client.Info</code> hunt.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<code>Generic.Client.Info</code> hunt.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/client_metadata/index.html b/vql_reference/server/client_metadata/index.html
index ec8c61ad33f..2ba710409b2 100644
--- a/vql_reference/server/client_metadata/index.html
+++ b/vql_reference/server/client_metadata/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>client_metadata :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/client_metadata/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/client_metadata/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -72,4 +72,4 @@
 <i class="linkcolour label pull-right label-success">READ_RESULTS</i>
 <i class="linkcolour label pull-right label-success">SERVER_ADMIN</i></p><h3 id=description>Description</h3><p>Returns client metadata from the datastore.</p><p>Client metadata is a set of free form key/value data. Artifacts
 may use this metdata or it may simply be used as part of your IR
-processes.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+processes.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/client_set_metadata/index.html b/vql_reference/server/client_set_metadata/index.html
index 054af5bf9cd..a06c9b05c58 100644
--- a/vql_reference/server/client_set_metadata/index.html
+++ b/vql_reference/server/client_set_metadata/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>client_set_metadata :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/client_set_metadata/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/client_set_metadata/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -73,4 +73,4 @@
 <i class="linkcolour label pull-right label-success">SERVER_ADMIN</i></p><h3 id=description>Description</h3><p>Sets client metadata.</p><p>Client metadata is a set of free form key/value data (see
 client_metadata() function).</p><h3 id=example>Example</h3><pre><code class=language-vql>SELECT client_set_metadata(ClientId=&quot;C.1234&quot;, Foo=&quot;Bar&quot;)
 FROM scope()
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/clients/index.html b/vql_reference/server/clients/index.html
index d06f991d8ab..c36b26bf8fb 100644
--- a/vql_reference/server/clients/index.html
+++ b/vql_reference/server/clients/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>clients :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/clients/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/clients/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>clients</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#clients>clients</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=clients>clients</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>search</td><td>Client search string. Can have the following prefixes: &rsquo;label:&rsquo;, &lsquo;host:&rsquo;</td><td>string</td></tr><tr><td>start</td><td>First client to fetch (0)'</td><td>uint64</td></tr><tr><td>count</td><td>Maximum number of clients to fetch (1000)'</td><td>uint64</td></tr><tr><td>client_id</td><td></td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Retrieve the list of clients.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Retrieve the list of clients.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/collect_client/index.html b/vql_reference/server/collect_client/index.html
index a3029763416..7451cabfa3b 100644
--- a/vql_reference/server/collect_client/index.html
+++ b/vql_reference/server/collect_client/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>collect_client :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/collect_client/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/collect_client/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -94,4 +94,4 @@
 </code></pre><p>In this case the artifact names are repeated in the spec and the
 artifacts parameter.</p><p>NOTE: When constructing the dictionaries for the spec parameter
 you will often need to specify a field name containing full
-stop. You can escape this using the backticks like the example above.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+stop. You can escape this using the backticks like the example above.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/compress/index.html b/vql_reference/server/compress/index.html
index 5fd556c555b..792550af717 100644
--- a/vql_reference/server/compress/index.html
+++ b/vql_reference/server/compress/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>compress :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/compress/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/compress/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 <span class=links>compress</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#compress>compress</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=compress>compress</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>A path to compress</td><td>string (required)</td></tr><tr><td>output</td><td>A path to write the output - default is the path with a .gz extension</td><td>string</td></tr></tbody></table><p>Required Permissions:
 <i class="linkcolour label pull-right label-success">FILESYSTEM_WRITE</i>
 <i class="linkcolour label pull-right label-success">FILESYSTEM_READ</i></p><h3 id=description>Description</h3><p>Compress a file.</p><p>The file is compressed using gzip. You can change the location of
-the output using the output parameter.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+the output using the output parameter.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/create_flow_download/index.html b/vql_reference/server/create_flow_download/index.html
index b70d304c840..b08481de2c2 100644
--- a/vql_reference/server/create_flow_download/index.html
+++ b/vql_reference/server/create_flow_download/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>create_flow_download :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/create_flow_download/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/create_flow_download/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -72,4 +72,4 @@
 <i class="linkcolour label pull-right label-success">PREPARE_RESULTS</i></p><h3 id=description>Description</h3><p>Creates a download pack for the flow.</p><p>This function initiates the download creation process for a
 flow. It is equivalent to the GUI functionality allowing to
 &ldquo;Download Results&rdquo; from the Flows Overview page.</p><p>Using the <code>wait</code> parameter you can wait for the download to
-complete or just kick it off asynchronously.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+complete or just kick it off asynchronously.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/create_hunt_download/index.html b/vql_reference/server/create_hunt_download/index.html
index df5b397f396..17db24ba192 100644
--- a/vql_reference/server/create_hunt_download/index.html
+++ b/vql_reference/server/create_hunt_download/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>create_hunt_download :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/create_hunt_download/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/create_hunt_download/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -72,4 +72,4 @@
 <i class="linkcolour label pull-right label-success">PREPARE_RESULTS</i></p><h3 id=description>Description</h3><p>Creates a download pack for a hunt.</p><p>This function initiates the download creation process for a
 hunt. It is equivalent to the GUI functionality allowing to
 &ldquo;Download Results&rdquo; from the Hunts Overview page.</p><p>Using the <code>wait</code> parameter you can wait for the download to
-complete or just kick it off asynchronously.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+complete or just kick it off asynchronously.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/elastic_upload/index.html b/vql_reference/server/elastic_upload/index.html
index 8e103357b28..8e90d2586f2 100644
--- a/vql_reference/server/elastic_upload/index.html
+++ b/vql_reference/server/elastic_upload/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>elastic_upload :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/elastic_upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/elastic_upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -73,4 +73,4 @@
 elastic. The query specified in <code>query</code> will be run and each row
 it emits will be uploaded as a separate event to Elastic.</p><p>You can either specify the elastic index explicitly using the
 <code>index</code> parameter or provide an <code>_index</code> column in the query
-itself to send the row to a different index each time.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+itself to send the row to a different index each time.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/enumerate_flow/index.html b/vql_reference/server/enumerate_flow/index.html
index 256a7be56cc..f6c83e37214 100644
--- a/vql_reference/server/enumerate_flow/index.html
+++ b/vql_reference/server/enumerate_flow/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>enumerate_flow :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/enumerate_flow/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/enumerate_flow/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 <span class=links>enumerate_flow</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#enumerate_flow>enumerate_flow</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=enumerate_flow>enumerate_flow</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>client_id</td><td></td><td>string (required)</td></tr><tr><td>flow_id</td><td></td><td>string</td></tr></tbody></table><p>Required Permissions:
 <i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Enumerate all the files that make up a flow.</p><p>This includes the uploaded files, the result sets and the various
 metadata files that result flow state information.</p><p>This plugin is mostly used for archiving or deleting a flow from
-the filestore.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+the filestore.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/favorites_delete/index.html b/vql_reference/server/favorites_delete/index.html
index 804f2eb048b..3d2a2ed3907 100644
--- a/vql_reference/server/favorites_delete/index.html
+++ b/vql_reference/server/favorites_delete/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>favorites_delete :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/favorites_delete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/favorites_delete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>favorites_delete</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#favorites_delete>favorites_delete</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=favorites_delete>favorites_delete</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>name</td><td>A name for this collection template.</td><td>string (required)</td></tr><tr><td>type</td><td>The type of favorite.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Delete a favorite.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>favorites_delete</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#favorites_delete>favorites_delete</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=favorites_delete>favorites_delete</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>name</td><td>A name for this collection template.</td><td>string (required)</td></tr><tr><td>type</td><td>The type of favorite.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Delete a favorite.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/favorites_save/index.html b/vql_reference/server/favorites_save/index.html
index a8701f8043c..83de36d6f0a 100644
--- a/vql_reference/server/favorites_save/index.html
+++ b/vql_reference/server/favorites_save/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>favorites_save :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/favorites_save/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/favorites_save/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 <span class=links>favorites_save</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#favorites_save>favorites_save</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=favorites_save>favorites_save</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>name</td><td>A name for this collection template.</td><td>string (required)</td></tr><tr><td>description</td><td>A description for the template.</td><td>string</td></tr><tr><td>specs</td><td>The collection request spec that will be saved. We use this to create the new collection.</td><td>LazyExpr (required)</td></tr><tr><td>type</td><td>The type of favorite.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Save a collection into the favorites.</p><p>Velociraptor allows the user to save a collection into their
 &ldquo;Favorite&rdquo; list. This allows them to quickly and easily pick a
 previously used collection.</p><p>This VQL function provides an interface for this functionality.</p><p>NOTE: A favorite belongs to the calling user - this function will
-update the favorite for the calling user only.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+update the favorite for the calling user only.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/file_store/index.html b/vql_reference/server/file_store/index.html
index 2e9edd825d4..f630a8669dc 100644
--- a/vql_reference/server/file_store/index.html
+++ b/vql_reference/server/file_store/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>file_store :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/file_store/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/file_store/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -78,4 +78,4 @@
 characters are escaped).</p><p>You can use the <code>file_store()</code> function to return the real file path
 on disk. This probably only makes sense for VQL queries running on the
 server which can independently open the file.</p><p>In future the file store may be abstracted (e.g. files may not be
-locally stored at all) and this function may stop working.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+locally stored at all) and this function may stop working.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/file_store_delete/index.html b/vql_reference/server/file_store_delete/index.html
index ab95bd2ae70..c1aa10a8f9a 100644
--- a/vql_reference/server/file_store_delete/index.html
+++ b/vql_reference/server/file_store_delete/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>file_store_delete :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/file_store_delete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/file_store_delete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>file_store_delete</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#file_store_delete>file_store_delete</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=file_store_delete>file_store_delete</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>A VFS path to remove</td><td>LazyExpr (required)</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">SERVER_ADMIN</i></p><h3 id=description>Description</h3><p>Delete file store paths.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">SERVER_ADMIN</i></p><h3 id=description>Description</h3><p>Delete file store paths.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/flow_results/index.html b/vql_reference/server/flow_results/index.html
index 85ace36ecde..cc5a5067931 100644
--- a/vql_reference/server/flow_results/index.html
+++ b/vql_reference/server/flow_results/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>flow_results :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/flow_results/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/flow_results/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>flow_results</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#flow_results>flow_results</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=flow_results>flow_results</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>artifact</td><td>The artifact to retrieve</td><td>string</td></tr><tr><td>source</td><td>An optional source within the artifact.</td><td>string</td></tr><tr><td>flow_id</td><td>The hunt id to read.</td><td>string (required)</td></tr><tr><td>client_id</td><td>The client id to extract</td><td>string (required)</td></tr></tbody></table><p>Required Permissions:
 <i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Retrieve the results of a flow.</p><p>This is similar to the source() plugin.</p><p>NOTE: Since a collection can collect multiple artifacts you must
-specify the artifact you are interested in.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+specify the artifact you are interested in.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/flows/index.html b/vql_reference/server/flows/index.html
index 8f99f5cb772..9187f406a27 100644
--- a/vql_reference/server/flows/index.html
+++ b/vql_reference/server/flows/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>flows :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/flows/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/flows/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>flows</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#flows>flows</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=flows>flows</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>client_id</td><td></td><td>string (required)</td></tr><tr><td>flow_id</td><td></td><td>string</td></tr></tbody></table><p>Required Permissions:
 <i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Retrieve the flows launched on each client.</p><p>Each flow record will include the creator of the flow, the request
-and metadata about the collection.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+and metadata about the collection.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/gcs_pubsub_publish/index.html b/vql_reference/server/gcs_pubsub_publish/index.html
index bbdd87d7bb3..d142644d472 100644
--- a/vql_reference/server/gcs_pubsub_publish/index.html
+++ b/vql_reference/server/gcs_pubsub_publish/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>gcs_pubsub_publish :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/gcs_pubsub_publish/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/gcs_pubsub_publish/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>gcs_pubsub_publish</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#gcs_pubsub_publish>gcs_pubsub_publish</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=gcs_pubsub_publish>gcs_pubsub_publish</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>topic</td><td>The topic to publish to</td><td>string (required)</td></tr><tr><td>project_id</td><td>The project id to publish to</td><td>string (required)</td></tr><tr><td>msg</td><td>Message to publish to Pubsub</td><td>Any (required)</td></tr><tr><td>credentials</td><td>The credentials to use</td><td>string (required)</td></tr><tr><td>attributes</td><td>The publish attributes</td><td>ordereddict.Dict (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Publish a message to Google PubSub.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>gcs_pubsub_publish</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#gcs_pubsub_publish>gcs_pubsub_publish</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=gcs_pubsub_publish>gcs_pubsub_publish</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>topic</td><td>The topic to publish to</td><td>string (required)</td></tr><tr><td>project_id</td><td>The project id to publish to</td><td>string (required)</td></tr><tr><td>msg</td><td>Message to publish to Pubsub</td><td>Any (required)</td></tr><tr><td>credentials</td><td>The credentials to use</td><td>string (required)</td></tr><tr><td>attributes</td><td>The publish attributes</td><td>ordereddict.Dict (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Publish a message to Google PubSub.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/geoip/index.html b/vql_reference/server/geoip/index.html
index bbb5f4b94c1..f00f1982966 100644
--- a/vql_reference/server/geoip/index.html
+++ b/vql_reference/server/geoip/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>geoip :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/geoip/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/geoip/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 <span class=links>geoip</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#geoip>geoip</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=geoip>geoip</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>ip</td><td>IP Address to lookup.</td><td>string (required)</td></tr><tr><td>db</td><td>Path to the MaxMind GeoIP Database.</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Lookup an IP Address using the MaxMind GeoIP database. You can get
 a copy of the database from <a href=https://www.maxmind.com/>https://www.maxmind.com/</a>. The database
 must be locally accessible so this probably only makes sense on
-the server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+the server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/get_client_monitoring/index.html b/vql_reference/server/get_client_monitoring/index.html
index 9bf6f18cf3a..7199f423ed8 100644
--- a/vql_reference/server/get_client_monitoring/index.html
+++ b/vql_reference/server/get_client_monitoring/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>get_client_monitoring :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/get_client_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/get_client_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -73,4 +73,4 @@
 of client event queries to deploy.</p><p>This function is designed to allow programmatic manipulation of
 the event query table in conjunction with set_client_monitoring()
 function.</p><p>It is commonly used together with the <code>patch()</code> function to patch
-the data structure to add additional event queries.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+the data structure to add additional event queries.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/get_server_monitoring/index.html b/vql_reference/server/get_server_monitoring/index.html
index 4d8df911b35..d5b69dde05c 100644
--- a/vql_reference/server/get_server_monitoring/index.html
+++ b/vql_reference/server/get_server_monitoring/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>get_server_monitoring :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/get_server_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/get_server_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>get_server_monitoring</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#get_server_monitoring>get_server_monitoring</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=get_server_monitoring>get_server_monitoring</h2><p><span class='vql_type pull-right page-header'>Function</span></p><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Retrieve the current server monitoring state.</p><p>See <code>get_client_monitoring()</code></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Retrieve the current server monitoring state.</p><p>See <code>get_client_monitoring()</code></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/gui_users/index.html b/vql_reference/server/gui_users/index.html
index 5696b22e5e0..1c1e1811515 100644
--- a/vql_reference/server/gui_users/index.html
+++ b/vql_reference/server/gui_users/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>gui_users :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/gui_users/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/gui_users/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>gui_users</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#gui_users>gui_users</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=gui_users>gui_users</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>all_orgs</td><td>If set we enumerate permission for all orgs, otherwise just for this org.</td><td>bool</td></tr></tbody></table><h3 id=description>Description</h3><p>Retrieve the list of users on the server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>gui_users</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#gui_users>gui_users</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=gui_users>gui_users</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>all_orgs</td><td>If set we enumerate permission for all orgs, otherwise just for this org.</td><td>bool</td></tr></tbody></table><h3 id=description>Description</h3><p>Retrieve the list of users on the server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/hunt/index.html b/vql_reference/server/hunt/index.html
index fa09a1fbefc..29c3c036ee8 100644
--- a/vql_reference/server/hunt/index.html
+++ b/vql_reference/server/hunt/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>hunt :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/hunt/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/hunt/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -86,4 +86,4 @@
         Device ='C:', VSSAnalysis='Y', KapeTriage='Y')),
     expires=now() + 18000)
 FROM scope()
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/hunt_add/index.html b/vql_reference/server/hunt_add/index.html
index 80f8fc038eb..903362a5068 100644
--- a/vql_reference/server/hunt_add/index.html
+++ b/vql_reference/server/hunt_add/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>hunt_add :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/hunt_add/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/hunt_add/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -82,4 +82,4 @@
 processing the hunt, exporting the hunt etc.</p><p>This is useful to redo a collection in a hunt - for example, if
 some collections in the hunt expired or were cancelled you can
 manually re-run these collections and then when successful re-add
-them to the hunt.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+them to the hunt.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/hunt_flows/index.html b/vql_reference/server/hunt_flows/index.html
index f5786a21dea..1f269afb27d 100644
--- a/vql_reference/server/hunt_flows/index.html
+++ b/vql_reference/server/hunt_flows/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>hunt_flows :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/hunt_flows/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/hunt_flows/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 <span class=links>hunt_flows</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#hunt_flows>hunt_flows</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=hunt_flows>hunt_flows</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>hunt_id</td><td>The hunt id to inspect.</td><td>string (required)</td></tr><tr><td>start_row</td><td>The first row to show (used for paging).</td><td>int64</td></tr><tr><td>limit</td><td>Number of rows to show (used for paging).</td><td>int64</td></tr></tbody></table><p>Required Permissions:
 <i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Retrieve the flows launched by a hunt.</p><p>A Velociraptor hunt is just a collection of related flows. This
 plugin simply enumerates all the flows as part of this hunt.</p><p>You can use this to figure out if all the collections were
-successful by looking at the result of each flow object.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+successful by looking at the result of each flow object.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/hunt_results/index.html b/vql_reference/server/hunt_results/index.html
index 4a94c58e636..b5357a495df 100644
--- a/vql_reference/server/hunt_results/index.html
+++ b/vql_reference/server/hunt_results/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>hunt_results :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/hunt_results/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/hunt_results/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 <span class=links>hunt_results</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#hunt_results>hunt_results</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=hunt_results>hunt_results</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>artifact</td><td>The artifact to retrieve</td><td>string</td></tr><tr><td>source</td><td>An optional source within the artifact.</td><td>string</td></tr><tr><td>hunt_id</td><td>The hunt id to read.</td><td>string (required)</td></tr><tr><td>brief</td><td>If set we return less columns.</td><td>bool</td></tr></tbody></table><p>Required Permissions:
 <i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Retrieve the results of a hunt.</p><p>This plugin essentially iterates over all flows in the hunt and
 reads out all collected rows for each client in the same table.</p><p>It is equivalent to the source() plugin in the hunt notebook
-context.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+context.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/hunts/index.html b/vql_reference/server/hunts/index.html
index a4af906c2a7..2f8a009e8b8 100644
--- a/vql_reference/server/hunts/index.html
+++ b/vql_reference/server/hunts/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>hunts :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/hunts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/hunts/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>hunts</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#hunts>hunts</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=hunts>hunts</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>hunt_id</td><td>A hunt id to read, if not specified we list all of them.</td><td>string</td></tr><tr><td>offset</td><td>Start offset.</td><td>uint64</td></tr><tr><td>count</td><td>Max number of results to return.</td><td>uint64</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Retrieve the list of hunts.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Retrieve the list of hunts.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/import_collection/index.html b/vql_reference/server/import_collection/index.html
index 0fb3e4c0307..e40784f1b1c 100644
--- a/vql_reference/server/import_collection/index.html
+++ b/vql_reference/server/import_collection/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>import_collection :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/import_collection/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/import_collection/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -77,4 +77,4 @@
 collection (there is no Velociraptor client running on the
 endpoint) we generate a random client ID for a new client.</p><p>If you specify an existing client id, the collection will be
 uploaded into that client.</p><p>NOTE: Combine this function with the hunt_add() function to add a
-manual offline collection to an ongoing hunt.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+manual offline collection to an ongoing hunt.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/index.html b/vql_reference/server/index.html
index ffdea89fafe..d226c06de72 100644
--- a/vql_reference/server/index.html
+++ b/vql_reference/server/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Server Side :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -73,4 +73,4 @@
 plugins and functions. You can use this functionality to manage
 and automate the server by writing VQL queries.</p><p>To reuse server side artifacts, simply create an artifact with
 <code>type: SERVER</code> and launch it from the &ldquo;Server Artifacts&rdquo; screen in
-the GUI.</p><table><thead><tr><th>Plugin/Function</th><th><span class=vql_type>Type</span></th><th>Description</th></tr></thead><tbody><tr><td><a href=add_client_monitoring>add_client_monitoring</a></td><td><span class=vql_type>Function</span></td><td>Adds a new artifact to the client monitoring table</td></tr><tr><td><a href=add_server_monitoring>add_server_monitoring</a></td><td><span class=vql_type>Function</span></td><td>Adds a new artifact to the server monitoring table</td></tr><tr><td><a href=artifact_definitions>artifact_definitions</a></td><td><span class=vql_type>Plugin</span></td><td>Dump artifact definitions from the internal repository</td></tr><tr><td><a href=artifact_delete>artifact_delete</a></td><td><span class=vql_type>Function</span></td><td>Deletes an artifact from the global repository</td></tr><tr><td><a href=artifact_set>artifact_set</a></td><td><span class=vql_type>Function</span></td><td>Sets an artifact into the global repository</td></tr><tr><td><a href=cancel_flow>cancel_flow</a></td><td><span class=vql_type>Function</span></td><td>Cancels the flow</td></tr><tr><td><a href=cidr_contains>cidr_contains</a></td><td><span class=vql_type>Function</span></td><td>Calculates if an IP address falls within a range of CIDR specified</td></tr><tr><td><a href=client_delete>client_delete</a></td><td><span class=vql_type>Plugin</span></td><td>Delete all information related to a client from the filestore</td></tr><tr><td><a href=client_info>client_info</a></td><td><span class=vql_type>Function</span></td><td>Returns client info (like the fqdn) from the datastore</td></tr><tr><td><a href=client_metadata>client_metadata</a></td><td><span class=vql_type>Function</span></td><td>Returns client metadata from the datastore</td></tr><tr><td><a href=client_set_metadata>client_set_metadata</a></td><td><span class=vql_type>Function</span></td><td>Sets client metadata</td></tr><tr><td><a href=clients>clients</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the list of clients</td></tr><tr><td><a href=collect_client>collect_client</a></td><td><span class=vql_type>Function</span></td><td>Launch an artifact collection against a client</td></tr><tr><td><a href=compress>compress</a></td><td><span class=vql_type>Function</span></td><td>Compress a file</td></tr><tr><td><a href=create_flow_download>create_flow_download</a></td><td><span class=vql_type>Function</span></td><td>Creates a download pack for the flow</td></tr><tr><td><a href=create_hunt_download>create_hunt_download</a></td><td><span class=vql_type>Function</span></td><td>Creates a download pack for a hunt</td></tr><tr><td><a href=elastic_upload>elastic_upload</a></td><td><span class=vql_type>Plugin</span></td><td>Upload rows to elastic</td></tr><tr><td><a href=enumerate_flow>enumerate_flow</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerate all the files that make up a flow</td></tr><tr><td><a href=favorites_delete>favorites_delete</a></td><td><span class=vql_type>Function</span></td><td>Delete a favorite</td></tr><tr><td><a href=favorites_save>favorites_save</a></td><td><span class=vql_type>Function</span></td><td>Save a collection into the favorites</td></tr><tr><td><a href=file_store>file_store</a></td><td><span class=vql_type>Function</span></td><td>Resolves file store paths into full filesystem paths</td></tr><tr><td><a href=file_store_delete>file_store_delete</a></td><td><span class=vql_type>Function</span></td><td>Delete file store paths</td></tr><tr><td><a href=flow_results>flow_results</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the results of a flow</td></tr><tr><td><a href=flows>flows</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the flows launched on each client</td></tr><tr><td><a href=gcs_pubsub_publish>gcs_pubsub_publish</a></td><td><span class=vql_type>Function</span></td><td>Publish a message to Google PubSub</td></tr><tr><td><a href=geoip>geoip</a></td><td><span class=vql_type>Function</span></td><td>Lookup an IP Address using the MaxMind GeoIP database</td></tr><tr><td><a href=get_client_monitoring>get_client_monitoring</a></td><td><span class=vql_type>Function</span></td><td>Retrieve the current client monitoring state</td></tr><tr><td><a href=get_server_monitoring>get_server_monitoring</a></td><td><span class=vql_type>Function</span></td><td>Retrieve the current server monitoring state</td></tr><tr><td><a href=gui_users>gui_users</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the list of users on the server</td></tr><tr><td><a href=hunt>hunt</a></td><td><span class=vql_type>Function</span></td><td>Create and launch a hunt</td></tr><tr><td><a href=hunt_add>hunt_add</a></td><td><span class=vql_type>Function</span></td><td>Assign a client to a hunt</td></tr><tr><td><a href=hunt_flows>hunt_flows</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the flows launched by a hunt</td></tr><tr><td><a href=hunt_results>hunt_results</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the results of a hunt</td></tr><tr><td><a href=hunts>hunts</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the list of hunts</td></tr><tr><td><a href=import_collection>import_collection</a></td><td><span class=vql_type>Function</span></td><td>Imports an offline collection zip file (experimental)</td></tr><tr><td><a href=inventory>inventory</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the tools inventory</td></tr><tr><td><a href=inventory_add>inventory_add</a></td><td><span class=vql_type>Function</span></td><td>Add or reconfigure a tool into the inventory</td></tr><tr><td><a href=inventory_get>inventory_get</a></td><td><span class=vql_type>Function</span></td><td>Get tool info from inventory service</td></tr><tr><td><a href=label>label</a></td><td><span class=vql_type>Function</span></td><td>Add the labels to the client</td></tr><tr><td><a href=mail>mail</a></td><td><span class=vql_type>Plugin</span></td><td>Send Email to a remote server</td></tr><tr><td><a href=monitoring>monitoring</a></td><td><span class=vql_type>Plugin</span></td><td>Extract monitoring log from a client</td></tr><tr><td><a href=notebook_delete>notebook_delete</a></td><td><span class=vql_type>Plugin</span></td><td>Delete a notebook with all its cells</td></tr><tr><td><a href=parallelize>parallelize</a></td><td><span class=vql_type>Plugin</span></td><td>Runs query on result batches in parallel</td></tr><tr><td><a href=patch>patch</a></td><td><span class=vql_type>Function</span></td><td>Patch a JSON object with a json patch or merge</td></tr><tr><td><a href=rate>rate</a></td><td><span class=vql_type>Function</span></td><td>Calculates the rate (derivative) between two quantities</td></tr><tr><td><a href=rm_client_monitoring>rm_client_monitoring</a></td><td><span class=vql_type>Function</span></td><td>Remove an artifact from the client monitoring table</td></tr><tr><td><a href=rm_server_monitoring>rm_server_monitoring</a></td><td><span class=vql_type>Function</span></td><td>Remove an artifact from the server monitoring table</td></tr><tr><td><a href=sample>sample</a></td><td><span class=vql_type>Plugin</span></td><td>Executes &lsquo;query&rsquo; and samples every n&rsquo;th row</td></tr><tr><td><a href=server_metadata>server_metadata</a></td><td><span class=vql_type>Function</span></td><td>Returns client metadata from the datastore</td></tr><tr><td><a href=server_set_metadata>server_set_metadata</a></td><td><span class=vql_type>Function</span></td><td>Sets server metadata</td></tr><tr><td><a href=set_client_monitoring>set_client_monitoring</a></td><td><span class=vql_type>Function</span></td><td>Sets the current client monitoring state</td></tr><tr><td><a href=set_server_monitoring>set_server_monitoring</a></td><td><span class=vql_type>Function</span></td><td>Sets the current server monitoring state</td></tr><tr><td><a href=source>source</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve rows from an artifact&rsquo;s source</td></tr><tr><td><a href=splunk_upload>splunk_upload</a></td><td><span class=vql_type>Plugin</span></td><td>Upload rows to splunk</td></tr><tr><td><a href=timeline>timeline</a></td><td><span class=vql_type>Plugin</span></td><td>Read a timeline</td></tr><tr><td><a href=timeline_add>timeline_add</a></td><td><span class=vql_type>Function</span></td><td>Add a new query to a timeline</td></tr><tr><td><a href=upload_directory>upload_directory</a></td><td><span class=vql_type>Function</span></td><td>Upload a file to an upload directory</td></tr><tr><td><a href=uploads>uploads</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve information about a flow&rsquo;s uploads</td></tr><tr><td><a href=user_create>user_create</a></td><td><span class=vql_type>Function</span></td><td>Creates a new user from the server, or updates their permissions or reset their password</td></tr><tr><td><a href=user_delete>user_delete</a></td><td><span class=vql_type>Function</span></td><td>Deletes a user from the server</td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+the GUI.</p><table><thead><tr><th>Plugin/Function</th><th><span class=vql_type>Type</span></th><th>Description</th></tr></thead><tbody><tr><td><a href=add_client_monitoring>add_client_monitoring</a></td><td><span class=vql_type>Function</span></td><td>Adds a new artifact to the client monitoring table</td></tr><tr><td><a href=add_server_monitoring>add_server_monitoring</a></td><td><span class=vql_type>Function</span></td><td>Adds a new artifact to the server monitoring table</td></tr><tr><td><a href=artifact_definitions>artifact_definitions</a></td><td><span class=vql_type>Plugin</span></td><td>Dump artifact definitions from the internal repository</td></tr><tr><td><a href=artifact_delete>artifact_delete</a></td><td><span class=vql_type>Function</span></td><td>Deletes an artifact from the global repository</td></tr><tr><td><a href=artifact_set>artifact_set</a></td><td><span class=vql_type>Function</span></td><td>Sets an artifact into the global repository</td></tr><tr><td><a href=cancel_flow>cancel_flow</a></td><td><span class=vql_type>Function</span></td><td>Cancels the flow</td></tr><tr><td><a href=cidr_contains>cidr_contains</a></td><td><span class=vql_type>Function</span></td><td>Calculates if an IP address falls within a range of CIDR specified</td></tr><tr><td><a href=client_delete>client_delete</a></td><td><span class=vql_type>Plugin</span></td><td>Delete all information related to a client from the filestore</td></tr><tr><td><a href=client_info>client_info</a></td><td><span class=vql_type>Function</span></td><td>Returns client info (like the fqdn) from the datastore</td></tr><tr><td><a href=client_metadata>client_metadata</a></td><td><span class=vql_type>Function</span></td><td>Returns client metadata from the datastore</td></tr><tr><td><a href=client_set_metadata>client_set_metadata</a></td><td><span class=vql_type>Function</span></td><td>Sets client metadata</td></tr><tr><td><a href=clients>clients</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the list of clients</td></tr><tr><td><a href=collect_client>collect_client</a></td><td><span class=vql_type>Function</span></td><td>Launch an artifact collection against a client</td></tr><tr><td><a href=compress>compress</a></td><td><span class=vql_type>Function</span></td><td>Compress a file</td></tr><tr><td><a href=create_flow_download>create_flow_download</a></td><td><span class=vql_type>Function</span></td><td>Creates a download pack for the flow</td></tr><tr><td><a href=create_hunt_download>create_hunt_download</a></td><td><span class=vql_type>Function</span></td><td>Creates a download pack for a hunt</td></tr><tr><td><a href=elastic_upload>elastic_upload</a></td><td><span class=vql_type>Plugin</span></td><td>Upload rows to elastic</td></tr><tr><td><a href=enumerate_flow>enumerate_flow</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerate all the files that make up a flow</td></tr><tr><td><a href=favorites_delete>favorites_delete</a></td><td><span class=vql_type>Function</span></td><td>Delete a favorite</td></tr><tr><td><a href=favorites_save>favorites_save</a></td><td><span class=vql_type>Function</span></td><td>Save a collection into the favorites</td></tr><tr><td><a href=file_store>file_store</a></td><td><span class=vql_type>Function</span></td><td>Resolves file store paths into full filesystem paths</td></tr><tr><td><a href=file_store_delete>file_store_delete</a></td><td><span class=vql_type>Function</span></td><td>Delete file store paths</td></tr><tr><td><a href=flow_results>flow_results</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the results of a flow</td></tr><tr><td><a href=flows>flows</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the flows launched on each client</td></tr><tr><td><a href=gcs_pubsub_publish>gcs_pubsub_publish</a></td><td><span class=vql_type>Function</span></td><td>Publish a message to Google PubSub</td></tr><tr><td><a href=geoip>geoip</a></td><td><span class=vql_type>Function</span></td><td>Lookup an IP Address using the MaxMind GeoIP database</td></tr><tr><td><a href=get_client_monitoring>get_client_monitoring</a></td><td><span class=vql_type>Function</span></td><td>Retrieve the current client monitoring state</td></tr><tr><td><a href=get_server_monitoring>get_server_monitoring</a></td><td><span class=vql_type>Function</span></td><td>Retrieve the current server monitoring state</td></tr><tr><td><a href=gui_users>gui_users</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the list of users on the server</td></tr><tr><td><a href=hunt>hunt</a></td><td><span class=vql_type>Function</span></td><td>Create and launch a hunt</td></tr><tr><td><a href=hunt_add>hunt_add</a></td><td><span class=vql_type>Function</span></td><td>Assign a client to a hunt</td></tr><tr><td><a href=hunt_flows>hunt_flows</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the flows launched by a hunt</td></tr><tr><td><a href=hunt_results>hunt_results</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the results of a hunt</td></tr><tr><td><a href=hunts>hunts</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the list of hunts</td></tr><tr><td><a href=import_collection>import_collection</a></td><td><span class=vql_type>Function</span></td><td>Imports an offline collection zip file (experimental)</td></tr><tr><td><a href=inventory>inventory</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve the tools inventory</td></tr><tr><td><a href=inventory_add>inventory_add</a></td><td><span class=vql_type>Function</span></td><td>Add or reconfigure a tool into the inventory</td></tr><tr><td><a href=inventory_get>inventory_get</a></td><td><span class=vql_type>Function</span></td><td>Get tool info from inventory service</td></tr><tr><td><a href=label>label</a></td><td><span class=vql_type>Function</span></td><td>Add the labels to the client</td></tr><tr><td><a href=mail>mail</a></td><td><span class=vql_type>Plugin</span></td><td>Send Email to a remote server</td></tr><tr><td><a href=monitoring>monitoring</a></td><td><span class=vql_type>Plugin</span></td><td>Extract monitoring log from a client</td></tr><tr><td><a href=notebook_delete>notebook_delete</a></td><td><span class=vql_type>Plugin</span></td><td>Delete a notebook with all its cells</td></tr><tr><td><a href=parallelize>parallelize</a></td><td><span class=vql_type>Plugin</span></td><td>Runs query on result batches in parallel</td></tr><tr><td><a href=patch>patch</a></td><td><span class=vql_type>Function</span></td><td>Patch a JSON object with a json patch or merge</td></tr><tr><td><a href=rate>rate</a></td><td><span class=vql_type>Function</span></td><td>Calculates the rate (derivative) between two quantities</td></tr><tr><td><a href=rm_client_monitoring>rm_client_monitoring</a></td><td><span class=vql_type>Function</span></td><td>Remove an artifact from the client monitoring table</td></tr><tr><td><a href=rm_server_monitoring>rm_server_monitoring</a></td><td><span class=vql_type>Function</span></td><td>Remove an artifact from the server monitoring table</td></tr><tr><td><a href=sample>sample</a></td><td><span class=vql_type>Plugin</span></td><td>Executes &lsquo;query&rsquo; and samples every n&rsquo;th row</td></tr><tr><td><a href=server_metadata>server_metadata</a></td><td><span class=vql_type>Function</span></td><td>Returns client metadata from the datastore</td></tr><tr><td><a href=server_set_metadata>server_set_metadata</a></td><td><span class=vql_type>Function</span></td><td>Sets server metadata</td></tr><tr><td><a href=set_client_monitoring>set_client_monitoring</a></td><td><span class=vql_type>Function</span></td><td>Sets the current client monitoring state</td></tr><tr><td><a href=set_server_monitoring>set_server_monitoring</a></td><td><span class=vql_type>Function</span></td><td>Sets the current server monitoring state</td></tr><tr><td><a href=source>source</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve rows from an artifact&rsquo;s source</td></tr><tr><td><a href=splunk_upload>splunk_upload</a></td><td><span class=vql_type>Plugin</span></td><td>Upload rows to splunk</td></tr><tr><td><a href=timeline>timeline</a></td><td><span class=vql_type>Plugin</span></td><td>Read a timeline</td></tr><tr><td><a href=timeline_add>timeline_add</a></td><td><span class=vql_type>Function</span></td><td>Add a new query to a timeline</td></tr><tr><td><a href=upload_directory>upload_directory</a></td><td><span class=vql_type>Function</span></td><td>Upload a file to an upload directory</td></tr><tr><td><a href=uploads>uploads</a></td><td><span class=vql_type>Plugin</span></td><td>Retrieve information about a flow&rsquo;s uploads</td></tr><tr><td><a href=user_create>user_create</a></td><td><span class=vql_type>Function</span></td><td>Creates a new user from the server, or updates their permissions or reset their password</td></tr><tr><td><a href=user_delete>user_delete</a></td><td><span class=vql_type>Function</span></td><td>Deletes a user from the server</td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527372></script><script src=/js/perfect-scrollbar.min.js?1699527372></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527372></script><script src=/js/jquery.sticky.js?1699527372></script><script src=/js/featherlight.min.js?1699527372></script><script src=/js/highlight.min.js?1699527372></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527372></script><script src=/js/learn.js?1699527372></script><script src=/js/hugo-learn.js?1699527372></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/inventory/index.html b/vql_reference/server/inventory/index.html
index 714b4002cea..a895f3420f4 100644
--- a/vql_reference/server/inventory/index.html
+++ b/vql_reference/server/inventory/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>inventory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/inventory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527372 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527372 rel=stylesheet><link href=/css/featherlight.min.css?1699527372 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527372 rel=stylesheet><link href=/css/auto-complete.css?1699527372 rel=stylesheet><link href=/css/theme.css?1699527372 rel=stylesheet><link href=/css/tabs.css?1699527372 rel=stylesheet><link href=/css/hugo-theme.css?1699527372 rel=stylesheet><link href=/css/theme-mine.css?1699527372 rel=stylesheet><link href=/css/dark.css?1699527372 rel=stylesheet><link href=/css/syntax.css?1699527372 rel=stylesheet><link href=/css/light.css?1699527372 rel=stylesheet><link href=/css/hljs.css?1699527372 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527372 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527372></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/inventory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>inventory</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#inventory>inventory</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=inventory>inventory</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>Retrieve the tools inventory.</p><p>The inventory contains information about all the external tools
-Velociraptor is managing. This plugin will display this.</p><p>See <a href=https://docs.velociraptor.app/docs/extending_vql/#using-external-tools>https://docs.velociraptor.app/docs/extending_vql/#using-external-tools</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+Velociraptor is managing. This plugin will display this.</p><p>See <a href=https://docs.velociraptor.app/docs/extending_vql/#using-external-tools>https://docs.velociraptor.app/docs/extending_vql/#using-external-tools</a></p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/inventory_add/index.html b/vql_reference/server/inventory_add/index.html
index 1bb592e94ff..2bf04b22d90 100644
--- a/vql_reference/server/inventory_add/index.html
+++ b/vql_reference/server/inventory_add/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>inventory_add :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/inventory_add/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/inventory_add/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 <span class=links>inventory_add</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#inventory_add>inventory_add</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=inventory_add>inventory_add</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>tool</td><td></td><td>string (required)</td></tr><tr><td>serve_locally</td><td></td><td>bool</td></tr><tr><td>url</td><td></td><td>string</td></tr><tr><td>hash</td><td></td><td>string</td></tr><tr><td>filename</td><td>The name of the file on the endpoint</td><td>string</td></tr><tr><td>version</td><td></td><td>string</td></tr><tr><td>file</td><td>An optional file to upload</td><td>OSPath</td></tr><tr><td>accessor</td><td>The accessor to use to read the file.</td><td>string</td></tr></tbody></table><p>Required Permissions:
 <i class="linkcolour label pull-right label-success">SERVER_ADMIN</i></p><h3 id=description>Description</h3><p>Add or reconfigure a tool into the inventory.</p><p>Note that if you provide a file to override the tool it must be
 readable by the server (so the file must reside on the server or
-be accessible over a network share).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+be accessible over a network share).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/inventory_get/index.html b/vql_reference/server/inventory_get/index.html
index f41def62856..0e257d806f4 100644
--- a/vql_reference/server/inventory_get/index.html
+++ b/vql_reference/server/inventory_get/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>inventory_get :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/inventory_get/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/inventory_get/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>inventory_get</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#inventory_get>inventory_get</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=inventory_get>inventory_get</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>tool</td><td></td><td>string (required)</td></tr><tr><td>version</td><td></td><td>string</td></tr><tr><td>probe</td><td>If specified we only probe the tool definition without materializing</td><td>bool</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">SERVER_ADMIN</i></p><h3 id=description>Description</h3><p>Get tool info from inventory service.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">SERVER_ADMIN</i></p><h3 id=description>Description</h3><p>Get tool info from inventory service.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/label/index.html b/vql_reference/server/label/index.html
index f8990793a48..ec0d359f6e3 100644
--- a/vql_reference/server/label/index.html
+++ b/vql_reference/server/label/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>label :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/label/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/label/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -73,4 +73,4 @@
 connected from an IP address matching the regular expression (You
 can also do a CIDR check using the <code>cidr_contains()</code> function)</p><pre><code class=language-vql>SELECT *, label(labels='MyLabel', op='set', client_id=client_id)
 FROM clients() WHERE  last_ip =~ &quot;127.+&quot;
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/mail/index.html b/vql_reference/server/mail/index.html
index 8898fbe0ee7..9e1faeb1080 100644
--- a/vql_reference/server/mail/index.html
+++ b/vql_reference/server/mail/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>mail :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/mail/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/mail/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>mail</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#mail>mail</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=mail>mail</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>to</td><td>Recipient of the mail</td><td>list of string (required)</td></tr><tr><td>from</td><td>The from email address.</td><td>string</td></tr><tr><td>cc</td><td>A cc for the mail</td><td>list of string</td></tr><tr><td>subject</td><td>The subject.</td><td>string</td></tr><tr><td>body</td><td>The body of the mail.</td><td>string (required)</td></tr><tr><td>period</td><td>How long to wait before sending the next mail - help to throttle mails.</td><td>int64</td></tr><tr><td>server_port</td><td>The SMTP server port to use (default 587).</td><td>uint64</td></tr><tr><td>server</td><td>The SMTP server to use (if not specified we try the config file).</td><td>string</td></tr><tr><td>auth_username</td><td>The SMTP username we authenticate to the server.</td><td>string</td></tr><tr><td>auth_password</td><td>The SMTP username password we use to authenticate to the server.</td><td>string</td></tr><tr><td>skip_verify</td><td>Skip SSL verification(default: False).</td><td>bool</td></tr><tr><td>root_ca</td><td>As a better alternative to disable_ssl_security, allows root ca certs to be added here.</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Send Email to a remote server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>mail</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#mail>mail</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=mail>mail</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>to</td><td>Recipient of the mail</td><td>list of string (required)</td></tr><tr><td>from</td><td>The from email address.</td><td>string</td></tr><tr><td>cc</td><td>A cc for the mail</td><td>list of string</td></tr><tr><td>subject</td><td>The subject.</td><td>string</td></tr><tr><td>body</td><td>The body of the mail.</td><td>string (required)</td></tr><tr><td>period</td><td>How long to wait before sending the next mail - help to throttle mails.</td><td>int64</td></tr><tr><td>server_port</td><td>The SMTP server port to use (default 587).</td><td>uint64</td></tr><tr><td>server</td><td>The SMTP server to use (if not specified we try the config file).</td><td>string</td></tr><tr><td>auth_username</td><td>The SMTP username we authenticate to the server.</td><td>string</td></tr><tr><td>auth_password</td><td>The SMTP username password we use to authenticate to the server.</td><td>string</td></tr><tr><td>skip_verify</td><td>Skip SSL verification(default: False).</td><td>bool</td></tr><tr><td>root_ca</td><td>As a better alternative to disable_ssl_security, allows root ca certs to be added here.</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Send Email to a remote server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/monitoring/index.html b/vql_reference/server/monitoring/index.html
index d8b45768670..6871b747869 100644
--- a/vql_reference/server/monitoring/index.html
+++ b/vql_reference/server/monitoring/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>monitoring :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>monitoring</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#monitoring>monitoring</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=monitoring>monitoring</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>client_id</td><td>The client id to extract</td><td>string</td></tr><tr><td>flow_id</td><td>A flow ID (client or server artifacts)</td><td>string</td></tr><tr><td>hunt_id</td><td>Retrieve sources from this hunt (combines all results from all clients)</td><td>string</td></tr><tr><td>artifact</td><td>The name of the artifact collection to fetch</td><td>string</td></tr><tr><td>source</td><td>An optional named source within the artifact</td><td>string</td></tr><tr><td>start_time</td><td>Start return events from this date (for event sources)</td><td>Any</td></tr><tr><td>end_time</td><td>Stop end events reach this time (event sources).</td><td>Any</td></tr><tr><td>notebook_id</td><td>The notebook to read from (should also include cell id)</td><td>string</td></tr><tr><td>notebook_cell_id</td><td>The notebook cell read from (should also include notebook id)</td><td>string</td></tr><tr><td>notebook_cell_table</td><td>A notebook cell can have multiple tables.)</td><td>int64</td></tr><tr><td>start_row</td><td>Start reading the result set from this row</td><td>int64</td></tr><tr><td>count</td><td>Maximum number of clients to fetch (default unlimited)'</td><td>int64</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Extract monitoring log from a client. If client_id is not specified we watch the global journal which contains event logs from all clients.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Extract monitoring log from a client. If client_id is not specified we watch the global journal which contains event logs from all clients.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/notebook_delete/index.html b/vql_reference/server/notebook_delete/index.html
index 55134276f3c..02c0bcae947 100644
--- a/vql_reference/server/notebook_delete/index.html
+++ b/vql_reference/server/notebook_delete/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>notebook_delete :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/notebook_delete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/notebook_delete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>notebook_delete</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#notebook_delete>notebook_delete</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=notebook_delete>notebook_delete</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>notebook_id</td><td></td><td>string (required)</td></tr><tr><td>really_do_it</td><td></td><td>bool</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">SERVER_ADMIN</i></p><h3 id=description>Description</h3><p>Delete a notebook with all its cells.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">SERVER_ADMIN</i></p><h3 id=description>Description</h3><p>Delete a notebook with all its cells.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/parallelize/index.html b/vql_reference/server/parallelize/index.html
index f20581d01fb..5711f7e9bfd 100644
--- a/vql_reference/server/parallelize/index.html
+++ b/vql_reference/server/parallelize/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>parallelize :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/parallelize/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/parallelize/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -83,4 +83,4 @@
    SELECT * FROM source()
    WHERE FullPath =~ &quot;XYZ&quot;
 })
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/patch/index.html b/vql_reference/server/patch/index.html
index b85827025d4..0ad526a17ff 100644
--- a/vql_reference/server/patch/index.html
+++ b/vql_reference/server/patch/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>patch :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/patch/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/patch/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -87,4 +87,4 @@
        item=get_client_monitoring(),
        patch=[dict(op=&quot;add&quot;, path=&quot;/artifacts/0&quot;, value=&quot;Windows.Events.DNSQueries&quot;)]))
 FROM scope()
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/rate/index.html b/vql_reference/server/rate/index.html
index c549097e9dd..87e1a1c44ad 100644
--- a/vql_reference/server/rate/index.html
+++ b/vql_reference/server/rate/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>rate :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/rate/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/rate/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 <span class=links>rate</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#rate>rate</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=rate>rate</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>x</td><td>The X float</td><td>float64 (required)</td></tr><tr><td>y</td><td>The Y float</td><td>float64 (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Calculates the rate (derivative) between two quantities.</p><p>For example if a monitoring plugin returns an absolute value
 sampled in time (e.g. bytes transferred sampled every second) then
 the rate() plugin can calculate the average bytes/sec.</p><p>This function works by remembering the values of x and y from the
-previous row and applying the current rows values.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+previous row and applying the current rows values.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/rm_client_monitoring/index.html b/vql_reference/server/rm_client_monitoring/index.html
index 62673a58892..8a519277223 100644
--- a/vql_reference/server/rm_client_monitoring/index.html
+++ b/vql_reference/server/rm_client_monitoring/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>rm_client_monitoring :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/rm_client_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/rm_client_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>rm_client_monitoring</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#rm_client_monitoring>rm_client_monitoring</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=rm_client_monitoring>rm_client_monitoring</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>artifact</td><td>The name of the artifact to add</td><td>string (required)</td></tr><tr><td>parameters</td><td>A dict of artifact parameters</td><td>LazyExpr</td></tr><tr><td>label</td><td>Add this artifact to this label group (default all)</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">COLLECT_CLIENT</i></p><h3 id=description>Description</h3><p>Remove an artifact from the client monitoring table.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">COLLECT_CLIENT</i></p><h3 id=description>Description</h3><p>Remove an artifact from the client monitoring table.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/rm_server_monitoring/index.html b/vql_reference/server/rm_server_monitoring/index.html
index ca3133fadec..bf97098bf23 100644
--- a/vql_reference/server/rm_server_monitoring/index.html
+++ b/vql_reference/server/rm_server_monitoring/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>rm_server_monitoring :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/rm_server_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/rm_server_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>rm_server_monitoring</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#rm_server_monitoring>rm_server_monitoring</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=rm_server_monitoring>rm_server_monitoring</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>artifact</td><td>The name of the artifact to add</td><td>string (required)</td></tr><tr><td>parameters</td><td>A dict of artifact parameters</td><td>LazyExpr</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">COLLECT_SERVER</i></p><h3 id=description>Description</h3><p>Remove an artifact from the server monitoring table.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">COLLECT_SERVER</i></p><h3 id=description>Description</h3><p>Remove an artifact from the server monitoring table.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/sample/index.html b/vql_reference/server/sample/index.html
index c4cbc6f0667..847de77ef38 100644
--- a/vql_reference/server/sample/index.html
+++ b/vql_reference/server/sample/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>sample :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/sample/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/sample/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>sample</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#sample>sample</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=sample>sample</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>query</td><td>Source query.</td><td>StoredQuery (required)</td></tr><tr><td>n</td><td>Pick every n row from query.</td><td>int64 (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Executes &lsquo;query&rsquo; and samples every n&rsquo;th row.</p><p>This is most useful on the server in order to downsample event
-artifact results.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+artifact results.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/server_metadata/index.html b/vql_reference/server/server_metadata/index.html
index 06a2c3e811d..b6aa00d8662 100644
--- a/vql_reference/server/server_metadata/index.html
+++ b/vql_reference/server/server_metadata/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>server_metadata :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/server_metadata/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/server_metadata/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>server_metadata</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#server_metadata>server_metadata</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=server_metadata>server_metadata</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>client_id</td><td></td><td>string (required)</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">SERVER_ADMIN</i></p><h3 id=description>Description</h3><p>Returns client metadata from the datastore. Client metadata is a set of free form key/value data</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">SERVER_ADMIN</i></p><h3 id=description>Description</h3><p>Returns client metadata from the datastore. Client metadata is a set of free form key/value data</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/server_set_metadata/index.html b/vql_reference/server/server_set_metadata/index.html
index c1b6969e5ea..46080b15318 100644
--- a/vql_reference/server/server_set_metadata/index.html
+++ b/vql_reference/server/server_set_metadata/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>server_set_metadata :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/server_set_metadata/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/server_set_metadata/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -71,4 +71,4 @@
 <span class=links>server_set_metadata</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#server_set_metadata>server_set_metadata</a><ul><li><a href=#description>Description</a></li><li><a href=#example>Example</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=server_set_metadata>server_set_metadata</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>metadata</td><td>A dict containing metadata. If not specified we use kwargs.</td><td>ordereddict.Dict</td></tr></tbody></table><h3 id=description>Description</h3><p>Sets server metadata. Server metadata is a set of free form
 key/value data, usually used for configuration of artifacts.</p><h3 id=example>Example</h3><pre><code class=language-vql>SELECT server_set_metadata(`Slack Token`=&quot;X12233&quot;)
 FROM scope()
-</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+</code></pre><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/set_client_monitoring/index.html b/vql_reference/server/set_client_monitoring/index.html
index 264eb921e3c..854bee080a0 100644
--- a/vql_reference/server/set_client_monitoring/index.html
+++ b/vql_reference/server/set_client_monitoring/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>set_client_monitoring :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/set_client_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/set_client_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>set_client_monitoring</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#set_client_monitoring>set_client_monitoring</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=set_client_monitoring>set_client_monitoring</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>value</td><td>The Value to set</td><td>Any (required)</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">COLLECT_CLIENT</i></p><h3 id=description>Description</h3><p>Sets the current client monitoring state.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">COLLECT_CLIENT</i></p><h3 id=description>Description</h3><p>Sets the current client monitoring state.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/set_server_monitoring/index.html b/vql_reference/server/set_server_monitoring/index.html
index d5a6bbb68e7..fa144330d29 100644
--- a/vql_reference/server/set_server_monitoring/index.html
+++ b/vql_reference/server/set_server_monitoring/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>set_server_monitoring :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/set_server_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/set_server_monitoring/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>set_server_monitoring</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#set_server_monitoring>set_server_monitoring</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=set_server_monitoring>set_server_monitoring</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>value</td><td>The Value to set</td><td>Any (required)</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">COLLECT_SERVER</i></p><h3 id=description>Description</h3><p>Sets the current server monitoring state.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">COLLECT_SERVER</i></p><h3 id=description>Description</h3><p>Sets the current server monitoring state.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/source/index.html b/vql_reference/server/source/index.html
index e63ba7bee92..03a57edbbce 100644
--- a/vql_reference/server/source/index.html
+++ b/vql_reference/server/source/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>source :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/source/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/source/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -74,4 +74,4 @@
 execution environment.</p><p>For example when called within a CLIENT report context, it will
 automatically fill its flow id, client id etc. Typically this
 means that you only need to specify the source name (for
-multi-source artifacts).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+multi-source artifacts).</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/splunk_upload/index.html b/vql_reference/server/splunk_upload/index.html
index c0b15f21a6f..71ab9d86767 100644
--- a/vql_reference/server/splunk_upload/index.html
+++ b/vql_reference/server/splunk_upload/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>splunk_upload :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/splunk_upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/splunk_upload/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>splunk_upload</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#splunk_upload>splunk_upload</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=splunk_upload>splunk_upload</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>query</td><td>Source for rows to upload.</td><td>StoredQuery (required)</td></tr><tr><td>threads</td><td>How many threads to use.</td><td>int64</td></tr><tr><td>url</td><td>The Splunk Event Collector URL.</td><td>string</td></tr><tr><td>token</td><td>Splunk HEC Token.</td><td>string</td></tr><tr><td>index</td><td>The name of the index to upload to.</td><td>string (required)</td></tr><tr><td>source</td><td>The source field for splunk. If not specified this will be &lsquo;velociraptor&rsquo;.</td><td>string</td></tr><tr><td>sourcetype</td><td>The sourcetype field for splunk. If not specified this will &lsquo;vql&rsquo;</td><td>string</td></tr><tr><td>chunk_size</td><td>The number of rows to send at the time.</td><td>int64</td></tr><tr><td>skip_verify</td><td>Skip SSL verification(default: False).</td><td>bool</td></tr><tr><td>root_ca</td><td>As a better alternative to skip_verify, allows root ca certs to be added here.</td><td>string</td></tr><tr><td>wait_time</td><td>Batch splunk upload this long (2 sec).</td><td>int64</td></tr><tr><td>hostname</td><td>Hostname for Splunk Events. Defaults to server hostname.</td><td>string</td></tr><tr><td>timestamp_field</td><td>Field to use as event timestamp.</td><td>string</td></tr><tr><td>hostname_field</td><td>Field to use as event hostname. Overrides hostname parameter.</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">COLLECT_SERVER</i></p><h3 id=description>Description</h3><p>Upload rows to splunk.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">COLLECT_SERVER</i></p><h3 id=description>Description</h3><p>Upload rows to splunk.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/timeline/index.html b/vql_reference/server/timeline/index.html
index 062e8702603..3fada7a0669 100644
--- a/vql_reference/server/timeline/index.html
+++ b/vql_reference/server/timeline/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>timeline :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/timeline/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/timeline/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>timeline</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#timeline>timeline</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=timeline>timeline</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>timeline</td><td>Name of the timeline to read</td><td>string (required)</td></tr><tr><td>skip</td><td>List of child components to skip</td><td>list of string</td></tr><tr><td>start</td><td>First timestamp to fetch</td><td>Any</td></tr><tr><td>notebook_id</td><td>The notebook ID the timeline is stored in.</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Read a timeline. You can create a timeline with the timeline_add() function</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Read a timeline. You can create a timeline with the timeline_add() function</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/timeline_add/index.html b/vql_reference/server/timeline_add/index.html
index 8fb42790f9e..8d8b5697ca9 100644
--- a/vql_reference/server/timeline_add/index.html
+++ b/vql_reference/server/timeline_add/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>timeline_add :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/timeline_add/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/timeline_add/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>timeline_add</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#timeline_add>timeline_add</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=timeline_add>timeline_add</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>timeline</td><td>Supertimeline to add to</td><td>string (required)</td></tr><tr><td>name</td><td>Name of child timeline</td><td>string (required)</td></tr><tr><td>query</td><td>Run this query to generate the timeline.</td><td>StoredQuery (required)</td></tr><tr><td>key</td><td>The column representing the time.</td><td>string (required)</td></tr><tr><td>notebook_id</td><td>The notebook ID the timeline is stored in.</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Add a new query to a timeline.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Add a new query to a timeline.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/upload_directory/index.html b/vql_reference/server/upload_directory/index.html
index d96a66a154a..d94813c3b41 100644
--- a/vql_reference/server/upload_directory/index.html
+++ b/vql_reference/server/upload_directory/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>upload_directory :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/upload_directory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/upload_directory/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>upload_directory</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#upload_directory>upload_directory</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=upload_directory>upload_directory</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>file</td><td>The file to upload</td><td>OSPath (required)</td></tr><tr><td>name</td><td>Filename to be stored within the output directory</td><td>OSPath</td></tr><tr><td>accessor</td><td>The accessor to use</td><td>string</td></tr><tr><td>output</td><td>An output directory to store files in.</td><td>string (required)</td></tr><tr><td>mtime</td><td>Modified time to set the output file.</td><td>Any</td></tr><tr><td>atime</td><td>Access time to set the output file.</td><td>Any</td></tr><tr><td>ctime</td><td>Change time to set the output file.</td><td>Any</td></tr><tr><td>btime</td><td>Birth time to set the output file.</td><td>Any</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">FILESYSTEM_WRITE</i></p><h3 id=description>Description</h3><p>Upload a file to an upload directory. The final filename will be the output directory path followed by the filename path.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">FILESYSTEM_WRITE</i></p><h3 id=description>Description</h3><p>Upload a file to an upload directory. The final filename will be the output directory path followed by the filename path.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/uploads/index.html b/vql_reference/server/uploads/index.html
index febeae0baac..e9ca395efdc 100644
--- a/vql_reference/server/uploads/index.html
+++ b/vql_reference/server/uploads/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>uploads :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/uploads/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/uploads/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>uploads</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#uploads>uploads</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=uploads>uploads</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>client_id</td><td>The client id to extract</td><td>string</td></tr><tr><td>flow_id</td><td>A flow ID (client or server artifacts)</td><td>string</td></tr><tr><td>hunt_id</td><td>A hunt ID</td><td>string</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Retrieve information about a flow&rsquo;s uploads.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">READ_RESULTS</i></p><h3 id=description>Description</h3><p>Retrieve information about a flow&rsquo;s uploads.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/user_create/index.html b/vql_reference/server/user_create/index.html
index 148b70c8894..e0739722449 100644
--- a/vql_reference/server/user_create/index.html
+++ b/vql_reference/server/user_create/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>user_create :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/user_create/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/user_create/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>user_create</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#user_create>user_create</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=user_create>user_create</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>user</td><td>The user to create or update.</td><td>string (required)</td></tr><tr><td>roles</td><td>List of roles to give the user.</td><td>list of string (required)</td></tr><tr><td>password</td><td>A password to set for the user (If not using SSO this might be needed).</td><td>string</td></tr><tr><td>orgs</td><td>One or more org IDs to grant access to. If empty we use the current org.</td><td>list of string</td></tr></tbody></table><h3 id=description>Description</h3><p>Creates a new user from the server, or updates their permissions or reset their password.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>user_create</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#user_create>user_create</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=user_create>user_create</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>user</td><td>The user to create or update.</td><td>string (required)</td></tr><tr><td>roles</td><td>List of roles to give the user.</td><td>list of string (required)</td></tr><tr><td>password</td><td>A password to set for the user (If not using SSO this might be needed).</td><td>string</td></tr><tr><td>orgs</td><td>One or more org IDs to grant access to. If empty we use the current org.</td><td>list of string</td></tr></tbody></table><h3 id=description>Description</h3><p>Creates a new user from the server, or updates their permissions or reset their password.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/server/user_delete/index.html b/vql_reference/server/user_delete/index.html
index f640f0a8785..82fb943d1f1 100644
--- a/vql_reference/server/user_delete/index.html
+++ b/vql_reference/server/user_delete/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>user_delete :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/user_delete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/server/user_delete/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>user_delete</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#user_delete>user_delete</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=user_delete>user_delete</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>user</td><td>The user to delete.</td><td>string (required)</td></tr><tr><td>orgs</td><td>If set we only delete from these orgs, otherwise we delete from the current org.</td><td>list of string</td></tr><tr><td>really_do_it</td><td>If not specified, just show what user will be removed</td><td>bool</td></tr></tbody></table><h3 id=description>Description</h3><p>Deletes a user from the server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>user_delete</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#user_delete>user_delete</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=user_delete>user_delete</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>user</td><td>The user to delete.</td><td>string (required)</td></tr><tr><td>orgs</td><td>If set we only delete from these orgs, otherwise we delete from the current org.</td><td>list of string</td></tr><tr><td>really_do_it</td><td>If not specified, just show what user will be removed</td><td>bool</td></tr></tbody></table><h3 id=description>Description</h3><p>Deletes a user from the server.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/amsi/index.html b/vql_reference/windows/amsi/index.html
index 3d04032fd1f..c2e578b2990 100644
--- a/vql_reference/windows/amsi/index.html
+++ b/vql_reference/windows/amsi/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>amsi :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/amsi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/amsi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>amsi</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#amsi>amsi</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=amsi>amsi</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>string</td><td>A string to scan</td><td>string (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>AMSI is an interface on windows to scan a string for malware. This
 function submits the string to the AMSI system and receives a
-determination if it is malware.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+determination if it is malware.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/appcompatcache/index.html b/vql_reference/windows/appcompatcache/index.html
index a917e2af549..cf61778dc75 100644
--- a/vql_reference/windows/appcompatcache/index.html
+++ b/vql_reference/windows/appcompatcache/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>appcompatcache :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/appcompatcache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/appcompatcache/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>appcompatcache</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#appcompatcache>appcompatcache</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=appcompatcache>appcompatcache</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>Parses the appcompatcache.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>appcompatcache</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#appcompatcache>appcompatcache</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=appcompatcache>appcompatcache</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>Parses the appcompatcache.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/authenticode/index.html b/vql_reference/windows/authenticode/index.html
index b675a042150..60a750e4a9b 100644
--- a/vql_reference/windows/authenticode/index.html
+++ b/vql_reference/windows/authenticode/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>authenticode :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/authenticode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/authenticode/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>authenticode</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#authenticode>authenticode</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=authenticode>authenticode</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr><tr><td>filename</td><td>The filename to parse.</td><td>OSPath (required)</td></tr><tr><td>verbose</td><td>Set to receive verbose information about all the certs.</td><td>bool</td></tr></tbody></table><p>Required Permissions:
 <i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Parses authenticode information from PE files.</p><p>On windows, the function will also use the windows API to determine
-if the binary is trusted by the system.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+if the binary is trusted by the system.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/certificates/index.html b/vql_reference/windows/certificates/index.html
index 1c3d862caf7..8ccc8a88311 100644
--- a/vql_reference/windows/certificates/index.html
+++ b/vql_reference/windows/certificates/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>certificates :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/certificates/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/certificates/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>certificates</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#certificates>certificates</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=certificates>certificates</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>Collect certificate from the system trust store.</p><p>This plugin uses the Windows APIs to fetch the certificates. You
 might also want to look at the <code>Windows.System.RootCAStore</code>
-artifact.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+artifact.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/dns/index.html b/vql_reference/windows/dns/index.html
index bb8d22b1a00..03a0c2b0180 100644
--- a/vql_reference/windows/dns/index.html
+++ b/vql_reference/windows/dns/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>dns :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/dns/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/dns/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -75,4 +75,4 @@
 signals to Windows Defender that the binary is legitimate.</p><p>If you do not intend to build Velociraptor from source, use the
 official signed Velociraptor binaries which should not trigger alerts
 from Windows Defender.</p></div></div><p>It is generally better to use ETW for DNS monitoring than this
-plugin (see Windows.Events.DNSQueries)</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+plugin (see Windows.Events.DNSQueries)</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/handles/index.html b/vql_reference/windows/handles/index.html
index 2bddacfb97b..dbf0846589d 100644
--- a/vql_reference/windows/handles/index.html
+++ b/vql_reference/windows/handles/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>handles :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/handles/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/handles/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>handles</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#handles>handles</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=handles>handles</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>pid</td><td>If specified only get handles from these PIDs.</td><td>uint64</td></tr><tr><td>types</td><td>If specified only get handles of this type.</td><td>list of string</td></tr></tbody></table><h3 id=description>Description</h3><p>Enumerate process handles.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>handles</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#handles>handles</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=handles>handles</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>pid</td><td>If specified only get handles from these PIDs.</td><td>uint64</td></tr><tr><td>types</td><td>If specified only get handles of this type.</td><td>list of string</td></tr></tbody></table><h3 id=description>Description</h3><p>Enumerate process handles.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/index.html b/vql_reference/windows/index.html
index 58a78ac5c7e..4eafbe96786 100644
--- a/vql_reference/windows/index.html
+++ b/vql_reference/windows/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>Windows Specific :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>Windows Specific</span></div><div class=progress><div class=wrapper><nav id=TableOfContents></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><h1>Windows Specific</h1><p>Many VQL plugins and functions provide access to the Windows
-APIs. The following are only available when running on Windows.</p><table><thead><tr><th>Plugin/Function</th><th><span class=vql_type>Type</span></th><th>Description</th></tr></thead><tbody><tr><td><a href=amsi>amsi</a></td><td><span class=vql_type>Function</span></td><td>AMSI is an interface on windows to scan a string for malware</td></tr><tr><td><a href=appcompatcache>appcompatcache</a></td><td><span class=vql_type>Plugin</span></td><td>Parses the appcompatcache</td></tr><tr><td><a href=authenticode>authenticode</a></td><td><span class=vql_type>Function</span></td><td>Parses authenticode information from PE files</td></tr><tr><td><a href=certificates>certificates</a></td><td><span class=vql_type>Plugin</span></td><td>Collect certificate from the system trust store</td></tr><tr><td><a href=dns>dns</a></td><td><span class=vql_type>Plugin</span></td><td>Monitor dns queries</td></tr><tr><td><a href=handles>handles</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerate process handles</td></tr><tr><td><a href=interfaces>interfaces</a></td><td><span class=vql_type>Plugin</span></td><td>List all active network interfaces using the API</td></tr><tr><td><a href=lookupSID>lookupSID</a></td><td><span class=vql_type>Function</span></td><td>Get information about the SID</td></tr><tr><td><a href=modules>modules</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerate Loaded DLLs</td></tr><tr><td><a href=partitions>partitions</a></td><td><span class=vql_type>Plugin</span></td><td>List all partitions</td></tr><tr><td><a href=proc_dump>proc_dump</a></td><td><span class=vql_type>Plugin</span></td><td>Dumps process memory</td></tr><tr><td><a href=proc_yara>proc_yara</a></td><td><span class=vql_type>Plugin</span></td><td>Scan processes using yara rules</td></tr><tr><td><a href=read_reg_key>read_reg_key</a></td><td><span class=vql_type>Plugin</span></td><td>This is a convenience plugin which applies the globs to the registry</td></tr><tr><td><a href=srum_lookup_id>srum_lookup_id</a></td><td><span class=vql_type>Function</span></td><td>Lookup a SRUM id</td></tr><tr><td><a href=token>token</a></td><td><span class=vql_type>Function</span></td><td>Extract process token</td></tr><tr><td><a href=users>users</a></td><td><span class=vql_type>Plugin</span></td><td>Display information about workstation local users</td></tr><tr><td><a href=vad>vad</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerate process memory regions</td></tr><tr><td><a href=winobj>winobj</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerate The Windows Object Manager namespace</td></tr><tr><td><a href=wmi>wmi</a></td><td><span class=vql_type>Plugin</span></td><td>Execute simple WMI queries synchronously</td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+APIs. The following are only available when running on Windows.</p><table><thead><tr><th>Plugin/Function</th><th><span class=vql_type>Type</span></th><th>Description</th></tr></thead><tbody><tr><td><a href=amsi>amsi</a></td><td><span class=vql_type>Function</span></td><td>AMSI is an interface on windows to scan a string for malware</td></tr><tr><td><a href=appcompatcache>appcompatcache</a></td><td><span class=vql_type>Plugin</span></td><td>Parses the appcompatcache</td></tr><tr><td><a href=authenticode>authenticode</a></td><td><span class=vql_type>Function</span></td><td>Parses authenticode information from PE files</td></tr><tr><td><a href=certificates>certificates</a></td><td><span class=vql_type>Plugin</span></td><td>Collect certificate from the system trust store</td></tr><tr><td><a href=dns>dns</a></td><td><span class=vql_type>Plugin</span></td><td>Monitor dns queries</td></tr><tr><td><a href=handles>handles</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerate process handles</td></tr><tr><td><a href=interfaces>interfaces</a></td><td><span class=vql_type>Plugin</span></td><td>List all active network interfaces using the API</td></tr><tr><td><a href=lookupSID>lookupSID</a></td><td><span class=vql_type>Function</span></td><td>Get information about the SID</td></tr><tr><td><a href=modules>modules</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerate Loaded DLLs</td></tr><tr><td><a href=partitions>partitions</a></td><td><span class=vql_type>Plugin</span></td><td>List all partitions</td></tr><tr><td><a href=proc_dump>proc_dump</a></td><td><span class=vql_type>Plugin</span></td><td>Dumps process memory</td></tr><tr><td><a href=proc_yara>proc_yara</a></td><td><span class=vql_type>Plugin</span></td><td>Scan processes using yara rules</td></tr><tr><td><a href=read_reg_key>read_reg_key</a></td><td><span class=vql_type>Plugin</span></td><td>This is a convenience plugin which applies the globs to the registry</td></tr><tr><td><a href=srum_lookup_id>srum_lookup_id</a></td><td><span class=vql_type>Function</span></td><td>Lookup a SRUM id</td></tr><tr><td><a href=token>token</a></td><td><span class=vql_type>Function</span></td><td>Extract process token</td></tr><tr><td><a href=users>users</a></td><td><span class=vql_type>Plugin</span></td><td>Display information about workstation local users</td></tr><tr><td><a href=vad>vad</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerate process memory regions</td></tr><tr><td><a href=winobj>winobj</a></td><td><span class=vql_type>Plugin</span></td><td>Enumerate The Windows Object Manager namespace</td></tr><tr><td><a href=wmi>wmi</a></td><td><span class=vql_type>Plugin</span></td><td>Execute simple WMI queries synchronously</td></tr></tbody></table><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/interfaces/index.html b/vql_reference/windows/interfaces/index.html
index 72bd405c1d7..f97caa76ee3 100644
--- a/vql_reference/windows/interfaces/index.html
+++ b/vql_reference/windows/interfaces/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>interfaces :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/interfaces/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/interfaces/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>interfaces</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#interfaces>interfaces</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=interfaces>interfaces</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>List all active network interfaces using the API.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>List all active network interfaces using the API.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/lookupsid/index.html b/vql_reference/windows/lookupsid/index.html
index fc34d5d427d..83bbcd307f0 100644
--- a/vql_reference/windows/lookupsid/index.html
+++ b/vql_reference/windows/lookupsid/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>lookupSID :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/lookupsid/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/lookupsid/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>lookupSID</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#lookupsid>lookupSID</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=lookupsid>lookupSID</h2><p><span class='vql_type pull-right page-header'>Function</span></p><h3 id=description>Description</h3><p>Get information about the SID.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>lookupSID</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#lookupsid>lookupSID</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=lookupsid>lookupSID</h2><p><span class='vql_type pull-right page-header'>Function</span></p><h3 id=description>Description</h3><p>Get information about the SID.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/modules/index.html b/vql_reference/windows/modules/index.html
index 5f7aa98b6ba..6bc86cd3b6a 100644
--- a/vql_reference/windows/modules/index.html
+++ b/vql_reference/windows/modules/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>modules :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/modules/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/modules/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>modules</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#modules>modules</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=modules>modules</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>pid</td><td>The PID to dump out.</td><td>int64 (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Enumerate Loaded DLLs.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>modules</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#modules>modules</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=modules>modules</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>pid</td><td>The PID to dump out.</td><td>int64 (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Enumerate Loaded DLLs.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/netstat/index.html b/vql_reference/windows/netstat/index.html
index 5249fc82a92..948b6ec23dd 100644
--- a/vql_reference/windows/netstat/index.html
+++ b/vql_reference/windows/netstat/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>netstat :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/netstat/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/netstat/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>netstat</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#netstat>netstat</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=netstat>netstat</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>Collect network information.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>netstat</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#netstat>netstat</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=netstat>netstat</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>Collect network information.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/partitions/index.html b/vql_reference/windows/partitions/index.html
index b2873c694db..32239ddde75 100644
--- a/vql_reference/windows/partitions/index.html
+++ b/vql_reference/windows/partitions/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>partitions :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/partitions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/partitions/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>partitions</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#partitions>partitions</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=partitions>partitions</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>List all partitions</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>partitions</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#partitions>partitions</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=partitions>partitions</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>List all partitions</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/proc_dump/index.html b/vql_reference/windows/proc_dump/index.html
index 2c98412decc..ae7d5fac0d5 100644
--- a/vql_reference/windows/proc_dump/index.html
+++ b/vql_reference/windows/proc_dump/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>proc_dump :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/proc_dump/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/proc_dump/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -73,4 +73,4 @@
 of the crash dump which is a temporary file - the file will be removed
 when the query completes, so if you want to hold on to it, you should
 use the upload() plugin to upload it to the server or otherwise copy
-it.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+it.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/proc_yara/index.html b/vql_reference/windows/proc_yara/index.html
index c8e530966b7..958a6ae051d 100644
--- a/vql_reference/windows/proc_yara/index.html
+++ b/vql_reference/windows/proc_yara/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>proc_yara :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/proc_yara/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/proc_yara/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -69,4 +69,4 @@
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>proc_yara</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#proc_yara>proc_yara</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=proc_yara>proc_yara</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>rules</td><td>Yara rules</td><td>string (required)</td></tr><tr><td>pid</td><td>The pid to scan</td><td>int (required)</td></tr><tr><td>context</td><td>Return this many bytes either side of a hit</td><td>int</td></tr><tr><td>key</td><td>If set use this key to cache the yara rules.</td><td>string</td></tr><tr><td>namespace</td><td>The Yara namespece to use.</td><td>string</td></tr><tr><td>vars</td><td>The Yara variables to use.</td><td>ordereddict.Dict</td></tr><tr><td>number</td><td>Stop after this many hits (1).</td><td>int64</td></tr></tbody></table><p>Required Permissions:
-<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Scan processes using yara rules.</p><p>This plugin uses yara&rsquo;s own engine to scan process memory for the signatures.</p><div class="mynotices note"><div heading=note><p>Process memory access depends on having the <a href=https://support.microsoft.com/en-au/help/131065/how-to-obtain-a-handle-to-any-process-with-sedebugprivilege>SeDebugPrivilege</a> which depends on how Velociraptor was started. Even when running as System, some processes are not accessible.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<i class="linkcolour label pull-right label-success">MACHINE_STATE</i></p><h3 id=description>Description</h3><p>Scan processes using yara rules.</p><p>This plugin uses yara&rsquo;s own engine to scan process memory for the signatures.</p><div class="mynotices note"><div heading=note><p>Process memory access depends on having the <a href=https://support.microsoft.com/en-au/help/131065/how-to-obtain-a-handle-to-any-process-with-sedebugprivilege>SeDebugPrivilege</a> which depends on how Velociraptor was started. Even when running as System, some processes are not accessible.</p></div></div><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/read_reg_key/index.html b/vql_reference/windows/read_reg_key/index.html
index 7f9ff6adc95..e3c7e0726e8 100644
--- a/vql_reference/windows/read_reg_key/index.html
+++ b/vql_reference/windows/read_reg_key/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>read_reg_key :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/read_reg_key/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/read_reg_key/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -72,4 +72,4 @@
 accessor to find keys. For each key the plugin then lists all the
 values within it, and returns a row which has the value names as
 columns, while the cells contain the value&rsquo;s stat info (and data
-content available in the <code>Data</code> field).</p><p>This makes it easier to access a bunch of related values at once.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+content available in the <code>Data</code> field).</p><p>This makes it easier to access a bunch of related values at once.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/srum_lookup_id/index.html b/vql_reference/windows/srum_lookup_id/index.html
index d2adefc4efc..568c2644a36 100644
--- a/vql_reference/windows/srum_lookup_id/index.html
+++ b/vql_reference/windows/srum_lookup_id/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>srum_lookup_id :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/srum_lookup_id/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/srum_lookup_id/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>srum_lookup_id</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#srum_lookup_id>srum_lookup_id</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=srum_lookup_id>srum_lookup_id</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>file</td><td></td><td>OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr><tr><td>id</td><td></td><td>int64 (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Lookup a SRUM id.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>srum_lookup_id</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#srum_lookup_id>srum_lookup_id</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=srum_lookup_id>srum_lookup_id</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>file</td><td></td><td>OSPath (required)</td></tr><tr><td>accessor</td><td>The accessor to use.</td><td>string</td></tr><tr><td>id</td><td></td><td>int64 (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Lookup a SRUM id.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/token/index.html b/vql_reference/windows/token/index.html
index d993d69bacd..dc61ad50569 100644
--- a/vql_reference/windows/token/index.html
+++ b/vql_reference/windows/token/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>token :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/token/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/token/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>token</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#token>token</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=token>token</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>pid</td><td>The PID to get the token for.</td><td>int64 (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Extract process token.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>token</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#token>token</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=token>token</h2><p><span class='vql_type pull-right page-header'>Function</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>pid</td><td>The PID to get the token for.</td><td>int64 (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Extract process token.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/users/index.html b/vql_reference/windows/users/index.html
index 09b0fc6a9f2..c94bd923cd9 100644
--- a/vql_reference/windows/users/index.html
+++ b/vql_reference/windows/users/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>users :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/users/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/users/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>users</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#users>users</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=users>users</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>Display information about workstation local users. This is obtained through the NetUserEnum() API.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>users</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#users>users</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=users>users</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><h3 id=description>Description</h3><p>Display information about workstation local users. This is obtained through the NetUserEnum() API.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/vad/index.html b/vql_reference/windows/vad/index.html
index 0ef3c42b764..69caf6f0049 100644
--- a/vql_reference/windows/vad/index.html
+++ b/vql_reference/windows/vad/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>vad :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/vad/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/vad/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>vad</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#vad>vad</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=vad>vad</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>pid</td><td>The PID to dump out.</td><td>int64 (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Enumerate process memory regions.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>vad</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#vad>vad</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=vad>vad</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>pid</td><td>The PID to dump out.</td><td>int64 (required)</td></tr></tbody></table><h3 id=description>Description</h3><p>Enumerate process memory regions.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/winobj/index.html b/vql_reference/windows/winobj/index.html
index 6f381156ea6..6223bddbe3c 100644
--- a/vql_reference/windows/winobj/index.html
+++ b/vql_reference/windows/winobj/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>winobj :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/winobj/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/winobj/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -68,4 +68,4 @@
 <a href=/search/><i class='fas fa-search'></i>Search</a></div></li></ul><hr><section id=shortcuts><h3></h3><ul><li><a class=padding href=https://github.com/Velocidex/velociraptor><i class='fab fa-github'></i>Github</a></li><li><a class=padding href=https://docs.velociraptor.app/discord/><i class='fab fa-discord'></i>Discord</a></li><li><a class=padding href=mailto:velociraptor-discuss@googlegroups.com><i class='fas fa-envelope'></i>Mailing List</a></li><li><a class=padding href=https://docs.velociraptor.app/rss/><i class='fas fa-rss'></i>RSS</a></li><li><a class=padding href=https://docs.rapid7.com/><i class='fa fa-question-circle'></i>Rapid7 Docs</a></li></ul></section><section id=footer><div class=footer-copyright>Brought to you by
 <img src=/images/Rapid7_logo.svg class=rapid7><br><i class="fas fa-copyright"></i> 2022</div></section></div></nav><script>$("#sidebar i.fa-angle-right").each(function(){$(this).parent().parent().find("ul").hide()})</script><section id=body><div id=overlay></div><div class="padding highlightable"><div><div id=top-bar><div id=breadcrumbs itemscope itemtype=http://data-vocabulary.org/Breadcrumb><span id=sidebar-toggle-span><a href=# id=sidebar-toggle data-sidebar-toggle><i class="fas fa-bars"></i>
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
-<span class=links>winobj</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#winobj>winobj</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=winobj>winobj</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>Object namespace path.</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Enumerate The Windows Object Manager namespace.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+<span class=links>winobj</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#winobj>winobj</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=winobj>winobj</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>path</td><td>Object namespace path.</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Enumerate The Windows Object Manager namespace.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
diff --git a/vql_reference/windows/wmi/index.html b/vql_reference/windows/wmi/index.html
index f3639e2b6ff..e4a2762e6fc 100644
--- a/vql_reference/windows/wmi/index.html
+++ b/vql_reference/windows/wmi/index.html
@@ -1,5 +1,5 @@
 <!doctype html><html lang=en class="js csstransforms3d"><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=generator content="Hugo 0.120.4"><meta name=description content><link rel=icon href=/images/favicon.png type=image/png><title>wmi :: Velociraptor - Digging deeper!</title>
-<link href=/css/nucleus.css?1699526436 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699526436 rel=stylesheet><link href=/css/featherlight.min.css?1699526436 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699526436 rel=stylesheet><link href=/css/auto-complete.css?1699526436 rel=stylesheet><link href=/css/theme.css?1699526436 rel=stylesheet><link href=/css/tabs.css?1699526436 rel=stylesheet><link href=/css/hugo-theme.css?1699526436 rel=stylesheet><link href=/css/theme-mine.css?1699526436 rel=stylesheet><link href=/css/dark.css?1699526436 rel=stylesheet><link href=/css/syntax.css?1699526436 rel=stylesheet><link href=/css/light.css?1699526436 rel=stylesheet><link href=/css/hljs.css?1699526436 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699526436 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699526436></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/wmi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
+<link href=/css/nucleus.css?1699527373 rel=stylesheet><link href=/css/fontawesome-all.min.css?1699527373 rel=stylesheet><link href=/css/featherlight.min.css?1699527373 rel=stylesheet><link href=/css/perfect-scrollbar.min.css?1699527373 rel=stylesheet><link href=/css/auto-complete.css?1699527373 rel=stylesheet><link href=/css/theme.css?1699527373 rel=stylesheet><link href=/css/tabs.css?1699527373 rel=stylesheet><link href=/css/hugo-theme.css?1699527373 rel=stylesheet><link href=/css/theme-mine.css?1699527373 rel=stylesheet><link href=/css/dark.css?1699527373 rel=stylesheet><link href=/css/syntax.css?1699527373 rel=stylesheet><link href=/css/light.css?1699527373 rel=stylesheet><link href=/css/hljs.css?1699527373 rel=stylesheet><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css?1699527373 rel=stylesheet><script src=/js/jquery-3.3.1.min.js?1699527373></script><style>:root #header+#content>#left>#rlblock_left{display:none!important}</style><script async src="https://www.googletagmanager.com/gtag/js?id=G-QYH72LMYCS"></script><script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-QYH72LMYCS",{anonymize_ip:!1})}</script><script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga("create","G-QYH72LMYCS","auto"),ga("send","pageview"))</script><script async src=https://www.google-analytics.com/analytics.js></script><script></script></head><body data-url=/vql_reference/windows/wmi/><nav id=sidebar><div id=header-wrapper><div id=header><script>function darkmode(){$("body").addClass("dark").removeClass("light"),document.cookie="theme=darkmode;path=/"}function lightmode(){$("body").removeClass("dark").addClass("light"),document.cookie="theme=lightmode;path=/"}const regex=new RegExp("theme=darkmode");regex.test(document.cookie)?darkmode():lightmode()</script><div class="btn btn-default ThemeSelector darkmode" onclick=darkmode()><i class="fas fa-moon"></i></div><div class="btn btn-default ThemeSelector lightmode" onclick=lightmode()><i class="fas fa-sun"></i></div><a href=https://docs.velociraptor.app/><img src=https://docs.velociraptor.app//images/logo.svg></a></div></div><div class=highlightable><ul class=topics><li data-nav-id=https://docs.velociraptor.app/announcements/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/announcements/><i class="fas fa-bullhorn"></i>Announcements</a></div><ul><li data-nav-id=https://docs.velociraptor.app/announcements/2023-cves/ class=dd-item><div><i class="fa fa-circleXX fa-sm category-icon"></i>
 <a href=/announcements/2023-cves/>Current CVEs</a></div></li></ul></li><li data-nav-id=https://docs.velociraptor.app/docs/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
 <a href=/docs/><i class="fas fa-book-reader"></i>Documentation</a></div><ul><li data-nav-id=https://docs.velociraptor.app/docs/overview/ class="dd-item haschildren"><div><i class="fa fa-angle-right fa-sm category-icon"></i>
@@ -70,4 +70,4 @@
 </a></span><span id=toc-menu><i class="fas fa-list-alt"></i></span>
 <span class=links>wmi</span></div><div class=progress><div class=wrapper><nav id=TableOfContents><ul><li><a href=#wmi>wmi</a><ul><li><a href=#description>Description</a></li></ul></li></ul></nav></div></div></div></div><div id=head-tags></div><div id=body-inner><div class=vql_item></div><h2 id=wmi>wmi</h2><p><span class='vql_type pull-right page-header'>Plugin</span></p><div class=vqlargs></div><table><thead><tr><th>Arg</th><th>Description</th><th>Type</th></tr></thead><tbody><tr><td>query</td><td>The WMI query to issue.</td><td>string (required)</td></tr><tr><td>namespace</td><td>The WMI namespace to use (ROOT/CIMV2)</td><td>string</td></tr></tbody></table><h3 id=description>Description</h3><p>Execute simple WMI queries synchronously.</p><p>This plugin issues a WMI query and returns its rows directly. The
 exact format of the returned row depends on the WMI query issued.</p><p>This plugin creates a bridge between WMI and VQL and it is a very
-commonly used plugin for inspecting the state of windows systems.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699526436></script><script src=/js/perfect-scrollbar.min.js?1699526436></script><script src=/js/perfect-scrollbar.jquery.min.js?1699526436></script><script src=/js/jquery.sticky.js?1699526436></script><script src=/js/featherlight.min.js?1699526436></script><script src=/js/highlight.min.js?1699526436></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699526436></script><script src=/js/learn.js?1699526436></script><script src=/js/hugo-learn.js?1699526436></script></body></html>
\ No newline at end of file
+commonly used plugin for inspecting the state of windows systems.</p><footer class=footline></footer></div></div></section><div style=left:-1000px;overflow:scroll;position:absolute;top:-1000px;border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px><div style=border:none;box-sizing:content-box;height:200px;margin:0;padding:0;width:200px></div></div><script src=/js/clipboard.min.js?1699527373></script><script src=/js/perfect-scrollbar.min.js?1699527373></script><script src=/js/perfect-scrollbar.jquery.min.js?1699527373></script><script src=/js/jquery.sticky.js?1699527373></script><script src=/js/featherlight.min.js?1699527373></script><script src=/js/highlight.min.js?1699527373></script><script>hljs.highlightAll()</script><script src=/js/modernizr.custom-3.6.0.js?1699527373></script><script src=/js/learn.js?1699527373></script><script src=/js/hugo-learn.js?1699527373></script></body></html>
\ No newline at end of file
